Julian B

**Name of the Vulnerable Software and Affected Versions** Tomofun Furbo 360 versions prior to FB0035 FW 036 Tomofun Furbo Mini versions prior to MC0020 FW 074 **Description** A weakness exists in Tomofun Furbo 360 and Furbo Mini related to password handling. Manipulation of the `/etc/shadow` file, through an unknown `function`, can lead to the use of weak hash values. The attack can be performed on the physical device and requires a high level of complexity, though exploitability is considered difficult. The exploit has been publicly disclosed. **Recommendations** Update Furbo 360 to a version later than FB0035 FW 036. Update Furbo Mini to a version later than MC0020 FW 074.

**Name of the Vulnerable Software and Affected Versions** Tomofun Furbo 360 versions prior to FB0035 FW 036 Tomofun Furbo Mini versions prior to MC0020 FW 074 **Description** A server-side request forgery condition exists in Tomofun Furbo 360 and Furbo Mini due to manipulation of the file `TF FQDN.json` within the GATT Interface URL Handler component. The attack can be performed remotely and is considered highly complex, with a difficult exploitability. The exploit has been publicly disclosed. **Recommendations** Update Tomofun Furbo 360 to version FB0035 FW 036 or later. Update Tomofun Furbo Mini to version MC0020 FW 074 or later.

**Name of the Vulnerable Software and Affected Versions** Tomofun Furbo 360 versions prior to FB0035 FW 036 Tomofun Furbo Mini versions prior to MC0020 FW 074 **Description** A security flaw exists in Tomofun Furbo 360 and Furbo Mini devices. The issue involves an unknown function within the Root Account Handler component, which, when manipulated, exposes a hard-coded password. An attacker with local access can exploit this flaw, potentially gaining unauthorized control over the device. The exploit has been made public. The complexity of the attack is considered high, and exploitability is described as difficult. **Recommendations** For Tomofun Furbo 360 versions prior to FB0035 FW 036, update the firmware to version FB0035 FW 036 or later. For Tomofun Furbo Mini versions prior to MC0020 FW 074, update the firmware to version MC0020 FW 074 or later.

**Name of the Vulnerable Software and Affected Versions** Tomofun Furbo 360 versions prior to FB0035 FW 036 Tomofun Furbo Mini versions prior to MC0020 FW 074 **Description** A flaw exists in the HTTP Traffic Handler component of Tomofun Furbo 360 and Furbo Mini. This issue results in improper certificate validation and can be exploited remotely. Exploitation is considered difficult and requires high complexity. **Recommendations** Update Furbo 360 to a version later than FB0035 FW 036. Update Furbo Mini to a version later than MC0020 FW 074.

**Name of the Vulnerable Software and Affected Versions** Tomofun Furbo 360 versions prior to FB0035 FW 036 Tomofun Furbo Mini versions prior to MC0020 FW 074 **Description** A security flaw exists in the UART Interface component of Tomofun Furbo 360 and Furbo Mini. Successful manipulation of this component can lead to information disclosure. An attack requires physical access to the device. The vendor was contacted regarding this issue but did not respond. **Recommendations** Update Furbo 360 to a version later than FB0035 FW 036. Update Furbo Mini to a version later than MC0020 FW 074.

**Name of the Vulnerable Software and Affected Versions** Tomofun Furbo 360 versions up to FB0035 FW 036 **Description** A weakness exists in the File Upload component of Tomofun Furbo 360. This manipulation causes resource consumption and remote exploitation is possible. The vendor was contacted regarding this issue but did not respond. **Recommendations** Update Tomofun Furbo 360 to a version beyond FB0035 FW 036.

**Name of the Vulnerable Software and Affected Versions** Tomofun Furbo 360 versions up to FB0035 FW 036 **Description** A server-side request forgery issue exists in the Account Handler component of Tomofun Furbo 360. The issue involves some unknown processing within this component, allowing for remote execution of the attack. The complexity of the attack is high, and exploitability is considered difficult. The vendor was contacted regarding this issue but did not respond. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Tomofun Furbo 360 versions up to FB0035 FW 036 **Description** A flaw exists in the Audio Handler component of Tomofun Furbo 360. Manipulation of this component can lead to a race condition, potentially allowing for remote attacks. The vendor was notified of this issue but did not provide a response. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Tomofun Furbo 360 versions prior to FB0035 FW 036 Tomofun Furbo Mini versions prior to MC0020 FW 074 **Description** A flaw exists in the Bluetooth Handler component of Tomofun Furbo 360 and Furbo Mini. Exploitation of this issue can lead to a denial of service. An attacker must be present on the local network to carry out the manipulation. **Recommendations** Update Furbo 360 to a version later than FB0035 FW 036. Update Furbo Mini to a version later than MC0020 FW 074.

**Name of the Vulnerable Software and Affected Versions** Tomofun Furbo 360 versions prior to FB0035 FW 036 Tomofun Furbo Mini versions prior to MC0020 FW 074 **Description** A security issue exists in Tomofun Furbo 360 and Furbo Mini related to insecure storage of sensitive information. The issue is associated with the `collect logs.sh` file within the Debug Log S3 Bucket Handler component and involves an unknown function. Exploitation requires local access. **Recommendations** Update Tomofun Furbo 360 to a version later than FB0035 FW 036 Update Tomofun Furbo Mini to a version later than MC0020 FW 074

**Name of the Vulnerable Software and Affected Versions** Tomofun Furbo 360 versions prior to FB0035 FW 036 Tomofun Furbo Mini versions prior to MC0020 FW 074 **Description** A security issue exists in Tomofun Furbo 360 and Furbo Mini related to the Bluetooth Low Energy component. The issue allows for the cleartext transmission of sensitive information. Exploitation requires access to the local network and is considered highly complex with a difficult exploitability. **Recommendations** Tomofun Furbo 360 versions prior to FB0035 FW 036 should be updated to FB0035 FW 036 or later. Tomofun Furbo Mini versions prior to MC0020 FW 074 should be updated to MC0020 FW 074 or later.

**Name of the Vulnerable Software and Affected Versions** Tomofun Furbo 360 versions prior to FB0035 FW 036 Tomofun Furbo Mini versions prior to MC0020 FW 074 **Description** An issue exists in the Trial Restriction Handler component of Tomofun Furbo 360 and Furbo Mini that results in improper access controls. The attack requires physical access to the device and is considered to have high complexity with difficult exploitability. **Recommendations** Update Furbo 360 to a version later than FB0035 FW 036. Update Furbo Mini to a version later than MC0020 FW 074.

**Name of the Vulnerable Software and Affected Versions** Tomofun Furbo 360 versions prior to FB0035 FW 036 Tomofun Furbo Mini versions prior to MC0020 FW 074 **Description** A flaw exists in the Registration Handler component of Tomofun Furbo 360 and Furbo Mini devices. This issue can lead to a denial of service. The attack requires direct access to the physical device and is considered difficult to exploit due to its high complexity. The vulnerability resides within an unknown `function` of the Registration Handler component. **Recommendations** Update Tomofun Furbo 360 to a firmware version later than FB0035 FW 036. Update Tomofun Furbo Mini to a firmware version later than MC0020 FW 074.

**Name of the Vulnerable Software and Affected Versions** Tomofun Furbo 360 versions prior to FB0035 FW 036 Tomofun Furbo Mini versions prior to MC0020 FW 074 **Description** A security flaw exists in Tomofun Furbo 360 and Furbo Mini devices. The issue involves manipulation of the file `/squashfs-root/furbo img` within the MQTT Client Certificate component, leading to the exposure of hard-coded credentials. This attack can be initiated remotely and is considered to have high complexity, though exploitation is difficult. **Recommendations** Update Furbo 360 to a version later than FB0035 FW 036. Update Furbo Mini to a version later than MC0020 FW 074.

**Name of the Vulnerable Software and Affected Versions** Tomofun Furbo 360 versions prior to FB0035 FW 036 Tomofun Furbo Mini versions prior to MC0020 FW 074 **Description** A weakness exists in the UART Interface component of Tomofun Furbo 360 and Furbo Mini. Manipulation of this component can result in insecure storage of sensitive information. The attack requires physical access to the device and is considered difficult to exploit. The exploit has been publicly released. **Recommendations** Update Tomofun Furbo 360 to a version later than FB0035 FW 036. Update Tomofun Furbo Mini to a version later than MC0020 FW 074.

**Name of the Vulnerable Software and Affected Versions** Tomofun Furbo Mobile App versions through 7.57.0a **Description** A security issue has been identified in the Authentication Token Handler component of the Tomofun Furbo Mobile App on Android. The vulnerability involves insecure storage of sensitive information, potentially allowing for exploitation on a physical device. The exploit has been publicly disclosed. The vendor was informed of the issue but did not respond. **Recommendations** Update to a newer version of the Tomofun Furbo Mobile App that addresses this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Tomofun Furbo 360 versions prior to FB0035 FW 036 Tomofun Furbo Mini versions prior to MC0020 FW 074 **Description** A flaw exists in Tomofun Furbo 360 and Furbo Mini due to improper access controls within the GATT Service component. This issue can be exploited from the local network. The exploit is publicly available. **Recommendations** Update Tomofun Furbo 360 to a version later than FB0035 FW 036. Update Tomofun Furbo Mini to a version later than MC0020 FW 074.

**Name of the Vulnerable Software and Affected Versions** Tomofun Furbo 360 versions prior to FB0035 FW 036 Tomofun Furbo Mini versions prior to MC0020 FW 074 **Description** A flaw exists in Tomofun Furbo 360 and Furbo Mini related to the processing of the GATT Service component. Manipulation of the `DeviceToken` argument can lead to information disclosure. The attack is limited to the local network and requires a high degree of complexity, making exploitability difficult. The exploit has been published. **Recommendations** Update Furbo 360 to a version later than FB0035 FW 036. Update Furbo Mini to a version later than MC0020 FW 074.

**Name of the Vulnerable Software and Affected Versions** mailcow: dockerized versions prior to 2024-07 **Description** The issue allows an unauthenticated attacker to inject a JavaScript payload into the API logs. This payload is executed when the API logs page is viewed, potentially allowing an attacker to run malicious scripts in the context of the user's browser. This could lead to unauthorized actions, data theft, or further exploitation of the affected system. **Recommendations** For versions prior to 2024-07, upgrade to the 2024-07 release or later to address the issue. As a temporary workaround, consider restricting access to the API logs page until the upgrade is applied. Avoid viewing the API logs page from an untrusted source to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** mailcow: dockerized versions prior to 2024-07 **Description** The issue is related to the Relay Hosts configuration, where an authenticated admin user can inject a JavaScript payload. This payload is executed when the configuration page is viewed, allowing the attacker to execute arbitrary scripts in the context of the user's browser. This could lead to data theft or further exploitation. **Recommendations** For versions prior to 2024-07, upgrade to the 2024-07 release or later to address the issue. As a temporary workaround, consider restricting access to the Relay Hosts configuration page to minimize the risk of exploitation. Avoid using the Relay Hosts configuration until the issue is resolved.