Skip to content
OpenAdvisories

Product · Tomofun

Furbo Mini

14 known vulnerabilities.

4 results · Clear filters · Feed

  • Medium 5.6

    Tomofun Furbo 360/Furbo Mini GATT Interface URL TF_FQDN.json server-side request forgery

    A vulnerability has been found in Tomofun Furbo 360 and Furbo Mini. Impacted is an unknown function of the file TF_FQDN.json of the component GATT Interface URL Handler. Such manipulation leads to server-side request forgery. The attack may be performed from …

  • Medium 6.3

    Tomofun Furbo 360/Furbo Mini GATT Service access control

    A vulnerability was detected in Tomofun Furbo 360 and Furbo Mini. This vulnerability affects unknown code of the component GATT Service. The manipulation results in improper access controls. The attack can only be performed from the local network. The exploit…

  • Medium 4.0

    Tomofun Furbo 360/Furbo Mini Registration denial of service

    A vulnerability was identified in Tomofun Furbo 360 and Furbo Mini. Affected is an unknown function of the component Registration Handler. Such manipulation leads to denial of service. The attack can be executed directly on the physical device. The attack req…

  • Medium 4.3

    Tomofun Furbo 360/Furbo Mini Bluetooth denial of service

    A flaw has been found in Tomofun Furbo 360 and Furbo Mini. The affected element is an unknown function of the component Bluetooth Handler. Executing manipulation can lead to denial of service. The attacker needs to be present on the local network. The firmwar…