Tomofun Furbo Mini

• CVE-2025-11650 Low 1.8 Tomofun Furbo 360/Furbo Mini Password shadow weak hash 0.2%
• CVE-2025-11649 High 7.0 Tomofun Furbo 360/Furbo Mini Root Account hard-coded password 0.1%
• CVE-2025-11648 Medium 5.6 Tomofun Furbo 360/Furbo Mini GATT Interface URL TF_FQDN.json server-side request forgery 0.5%
• CVE-2025-11647 Low 3.1 Tomofun Furbo 360/Furbo Mini GATT Service information disclosure 0.6%
• CVE-2025-11646 Medium 6.3 Tomofun Furbo 360/Furbo Mini GATT Service access control 0.6%
• CVE-2025-11644 Low 2.0 Tomofun Furbo 360/Furbo Mini UART sensitive information 0.3%
• CVE-2025-11643 Low 3.7 Tomofun Furbo 360/Furbo Mini MQTT Client Certificate furbo_img hard-coded credentials 0.3%
• CVE-2025-11642 Medium 4.0 Tomofun Furbo 360/Furbo Mini Registration denial of service 0.2%
• CVE-2025-11641 Low 3.9 Tomofun Furbo 360/Furbo Mini Trial Restriction access control 0.2%
• CVE-2025-11640 Low 3.1 Tomofun Furbo 360/Furbo Mini Bluetooth Low Energy cleartext transmission 0.2%
• CVE-2025-11639 Low 3.3 Tomofun Furbo 360/Furbo Mini Debug Log S3 Bucket collect_logs.sh sensitive information 0.2%
• CVE-2025-11638 Medium 4.3 Tomofun Furbo 360/Furbo Mini Bluetooth denial of service 0.3%
• CVE-2025-11634 Low 2.4 Tomofun Furbo 360/Furbo Mini UART information disclosure 0.2%
• CVE-2025-11633 Low 3.7 Tomofun Furbo 360/Furbo Mini HTTP Traffic collect_logs.sh upload_file_to_s3 certificate validation 0.3%