PT-2026-1182 · Petlibro · Petlibro Smart Pet Feeder Platform

Bobdahacker · Publicado 2026-01-03 · Atualizado 2026-02-03 · CVE-2025-3654

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Petlibro Smart Pet Feeder Platform versions up to 1.7.31

Description The Petlibro Smart Pet Feeder Platform is affected by an information disclosure issue. This allows unauthorized access to device hardware information. An attacker can obtain device serial numbers and MAC addresses by exploiting insecure API endpoints. The /device/devicePetRelation/getBoundDevices API endpoint is vulnerable, allowing retrieval of information using pet IDs. This enables full device control without proper authorization.

Recommendations Update to a version later than 1.7.31.

Correção

Enumeração de Fraquezas

CWE-612

Identificadores relacionados

CVE-2025-3654

Produtos afetados

Petlibro Smart Pet Feeder Platform

Referências · 8

• https://t.me/CVEtracker/41323 · Publicação no Telegram
• https://t.me/cveNotify/147648 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2025-3654 · Aviso do Fabricante
• https://vulncheck.com/advisories/petlibro-smart-pet-feeder-platform-through-information-disclosure-via-api-endpoint · Nota
• https://bobdahacker.com/blog/petlibro · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-3654 · Nota de Segurança
• https://t.me/cveNotify/150773 · Publicação no Telegram
• https://twitter.com/CVEnew/status/2007600721588277694 · Publicação no Twitter