A hard-coded root password in the Tomofun Furbo 360 and Furbo Mini pet cameras allows local attackers with low privileges to achieve full device compromise (confidentiality, integrity, and availability impact). Exploitation requires local access and high attack complexity, and a public proof-of-concept exists on GitHub. At the time of analysis, EPSS estimates a 0.02% probability of exploitation, and no active exploitation has been reported.
Authentication Bypass
Furbo Mini Firmware
Furbo 360 Dog Camera Firmware
Furbo
NVD
GitHub
VulDB
CVSS 4.0
6.4
EPSS
0.0%