PT-2025-41729 · Tomofun · Furbo Mini+1

Calvin Star + 2 · Published 2025-10-12 · Updated 2025-10-12 · CVE-2025-11641

Positive Technologies (AI Summary)

CVSS v3.1

6.4

Medium

Base vector

AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Tomofun Furbo 360 versions prior to FB0035 FW 036 Tomofun Furbo Mini versions prior to MC0020 FW 074

Description An issue exists in the Trial Restriction Handler component of Tomofun Furbo 360 and Furbo Mini that results in improper access controls. The attack requires physical access to the device and is considered to have high complexity with difficult exploitability.

Recommendations Update Furbo 360 to a version later than FB0035 FW 036. Update Furbo Mini to a version later than MC0020 FW 074.

Fix

Improper Access Control

Incorrect Privilege Assignment

Weakness Enumeration

CWE-284

CWE-266

Related Identifiers

CVE-2025-11641

Affected Products

Furbo 360

Furbo Mini

References · 8

• https://osv.dev/vulnerability/CVE-2025-11641 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-11641 · Security Note
• https://vuldb.com/?id.328052 · Note
• https://t.me/CVEtracker/34720 · Telegram Post
• https://vuldb.com/?ctiid.328052 · Note
• https://twitter.com/VulmonFeeds/status/1977459947458674855 · Twitter Post
• https://t.me/cveNotify/138391 · Telegram Post
• https://vuldb.com/?submit.661379 · Note