CVE-2025-11641
Tomofun Furbo 360/Furbo Mini Trial Restriction access control
- State
- Published
- Severity
- 1.0 Low
- Published
- Oct 12, 2025
- Updated
- Oct 17, 2025
- Reserved
- Oct 11, 2025
Description
A vulnerability was determined in Tomofun Furbo 360 and Furbo Mini. This impacts an unknown function of the component Trial Restriction Handler. This manipulation causes improper access controls. It is feasible to perform the attack on the physical device. The attack is considered to have high complexity. The exploitability is said to be difficult. The firmware versions determined to be affected are Furbo 360 up to FB0035_FW_036 and Furbo Mini up to MC0020_FW_074. The vendor was contacted early about this disclosure but did not respond in any way.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 1.0 Low | CVSS:4.0/AV:P/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X | VulDB |
| 3.1 | 3.9 Low | CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:X | VulDB |
| 3.0 | 3.9 Low | CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:X | VulDB |
| 2.0 | 3.7 Low | AV:L/AC:H/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:ND | VulDB |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
Furbo 360Tomofun |
|
Furbo MiniTomofun |
|
References
- VDB-328052 | Tomofun Furbo 360/Furbo Mini Trial Restriction access controlvdb-entrytechnical-description
- VDB-328052 | CTI Indicators (IOB, IOC, TTP)signaturepermissions-required
- Submit #661379 | Tomofun Furbo 360, Furbo Mini Furbo 360 (≤ FB0035_FW_036), Furbo Mini (≤ MC0020_FW_074) Application Logic Bypassthird-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.