Julian B

A weakness exists in Tomofun Furbo 360 and Furbo Mini related to password handling. Manipulation of the `/etc/shadow` file, through an unknown `function`, can lead to the use of weak hash values. The attack can be performed on the physical device and requires a high level of complexity, though exploitability is considered difficult. The exploit has been publicly disclosed.

A server-side request forgery condition exists in Tomofun Furbo 360 and Furbo Mini due to manipulation of the file `TF FQDN.json` within the GATT Interface URL Handler component. The attack can be performed remotely and is considered highly complex, with a difficult exploitability. The exploit has been publicly disclosed.

A security flaw exists in Tomofun Furbo 360 and Furbo Mini devices. The issue involves an unknown function within the Root Account Handler component, which, when manipulated, exposes a hard-coded password. An attacker with local access can exploit this flaw, potentially gaining unauthorized control over the device. The exploit has been made public. The complexity of the attack is considered high, and exploitability is described as difficult.

A flaw exists in the HTTP Traffic Handler component of Tomofun Furbo 360 and Furbo Mini. This issue results in improper certificate validation and can be exploited remotely. Exploitation is considered difficult and requires high complexity.

A security flaw exists in the UART Interface component of Tomofun Furbo 360 and Furbo Mini. Successful manipulation of this component can lead to information disclosure. An attack requires physical access to the device. The vendor was contacted regarding this issue but did not respond.

A weakness exists in the File Upload component of Tomofun Furbo 360. This manipulation causes resource consumption and remote exploitation is possible. The vendor was contacted regarding this issue but did not respond.

A server-side request forgery issue exists in the Account Handler component of Tomofun Furbo 360. The issue involves some unknown processing within this component, allowing for remote execution of the attack. The complexity of the attack is high, and exploitability is considered difficult. The vendor was contacted regarding this issue but did not respond.

A flaw exists in the Audio Handler component of Tomofun Furbo 360. Manipulation of this component can lead to a race condition, potentially allowing for remote attacks. The vendor was notified of this issue but did not provide a response.

A flaw exists in the Bluetooth Handler component of Tomofun Furbo 360 and Furbo Mini. Exploitation of this issue can lead to a denial of service. An attacker must be present on the local network to carry out the manipulation.

A security issue exists in Tomofun Furbo 360 and Furbo Mini related to insecure storage of sensitive information. The issue is associated with the `collect logs.sh` file within the Debug Log S3 Bucket Handler component and involves an unknown function. Exploitation requires local access.

A security issue exists in Tomofun Furbo 360 and Furbo Mini related to the Bluetooth Low Energy component. The issue allows for the cleartext transmission of sensitive information. Exploitation requires access to the local network and is considered highly complex with a difficult exploitability.

An issue exists in the Trial Restriction Handler component of Tomofun Furbo 360 and Furbo Mini that results in improper access controls. The attack requires physical access to the device and is considered to have high complexity with difficult exploitability.

A flaw exists in the Registration Handler component of Tomofun Furbo 360 and Furbo Mini devices. This issue can lead to a denial of service. The attack requires direct access to the physical device and is considered difficult to exploit due to its high complexity. The vulnerability resides within an unknown `function` of the Registration Handler component.

A security flaw exists in Tomofun Furbo 360 and Furbo Mini devices. The issue involves manipulation of the file `/squashfs-root/furbo img` within the MQTT Client Certificate component, leading to the exposure of hard-coded credentials. This attack can be initiated remotely and is considered to have high complexity, though exploitation is difficult.

A weakness exists in the UART Interface component of Tomofun Furbo 360 and Furbo Mini. Manipulation of this component can result in insecure storage of sensitive information. The attack requires physical access to the device and is considered difficult to exploit. The exploit has been publicly released.

A security issue has been identified in the Authentication Token Handler component of the Tomofun Furbo Mobile App on Android. The vulnerability involves insecure storage of sensitive information, potentially allowing for exploitation on a physical device. The exploit has been publicly disclosed. The vendor was informed of the issue but did not respond.

A flaw exists in Tomofun Furbo 360 and Furbo Mini due to improper access controls within the GATT Service component. This issue can be exploited from the local network. The exploit is publicly available.

A flaw exists in Tomofun Furbo 360 and Furbo Mini related to the processing of the GATT Service component. Manipulation of the `DeviceToken` argument can lead to information disclosure. The attack is limited to the local network and requires a high degree of complexity, making exploitability difficult. The exploit has been published.

The issue allows an unauthenticated attacker to inject a JavaScript payload into the API logs. This payload is executed when the API logs page is viewed, potentially allowing an attacker to run malicious scripts in the context of the user's browser. This could lead to unauthorized actions, data theft, or further exploitation of the affected system.

The issue is related to the Relay Hosts configuration, where an authenticated admin user can inject a JavaScript payload. This payload is executed when the configuration page is viewed, allowing the attacker to execute arbitrary scripts in the context of the user's browser. This could lead to data theft or further exploitation.