CVE-2025-11636: furbo 360 dog camera firmware

csirt@kutim:~/threat-intel/cve/CVE-2025-11636

CVSS 8.1 · High EPSS 0,40%

Kerentanan Server-Side Request Forgery (SSRF) pada furbo 360 dog camera firmware. Skor CVSS 3.1 8.1 (High) menurut NVD.

Deskripsi (NVD)

A security vulnerability has been detected in Tomofun Furbo 360 up to FB0035_FW_036. This issue affects some unknown processing of the component Account Handler. Such manipulation leads to server-side request forgery. The attack can be executed remotely. This attack is characterized by high complexity. The exploitability is assessed as difficult. The vendor was contacted early about this disclosure but did not respond in any way.

Rincian

Terbit di NVD: 12 Oktober 2025
Terakhir diubah: 8 Oktober 2026
Status NVD: Analyzed
CVSS 3.1: 8.1 (High), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-918: Server-Side Request Forgery (SSRF)
EPSS (30 hari): 0,40% peluang dieksploitasi; lebih tinggi dari 32,8% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
furbo	furbo 360 dog camera firmware	Semua versi hingga 036

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://vuldb.com/?id.328047 advisory pihak ketiga · vdb entry
https://vuldb.com/?submit.661361 advisory pihak ketiga · vdb entry
https://vuldb.com/?ctiid.328047 permissions required · vdb entry

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 9 Okt 2026, 00:26 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.