CNNVD-202510-1593 Information

CNNVD ID

CNNVD-202510-1593

CVE-2025-11643

  • CNNVD Published: 2025-10-12

Description (Chinese)

Tomofun Furbo 360和Tomofun Furbo Mini都是中国台湾Tomofun公司的一款智能宠物摄像机。 Tomofun Furbo 360 FB0035_FW_036及之前版本和Tomofun Furbo Mini MC0020_FW_074及之前版本存在信任管理问题漏洞,该漏洞源于MQTT客户端证书中存在硬编码凭证,可能导致远程攻击。

Description (English)

Tomofun Furbo 360 and Tomofun Furbo Mini are smart pet cameras from Tomofun, Taiwan, China. Tomofun Furbo 360 FB0035 FW 036 et seq. and Tomofun Furbo Mini MC0020 FW 074 et seq. have trust management management gaps, which stem from the existence of hard-coded documents in MQTT client certificates, which may lead to a remote attack.

Hazard Level

Critical

Vulnerability Type

信任管理问题

Affected Vendor

Tomofun

Published

2025-10-12

Last Modified

2026-02-24

References

https://vuldb.com/?ctiid.328054 https://vuldb.com/?id.328054 https://vuldb.com/?submit.661875 https://access.redhat.com/security/cve/cve-2025-11643

Share on: