Skip to main content

Petlibro CVE-2025-3654

MEDIUM
Improper Authorization of Index Containing Sensitive Information (CWE-612)
2026-01-04 disclosure@vulncheck.com
Information Disclosure Petlibro
5.3
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
5.3 MEDIUM
AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
None
Availability
None

Lifecycle Timeline

2
Analysis Generated
Mar 12, 2026 - 21:54 vuln.today
CVE Published
Jan 04, 2026 - 00:15 nvd
MEDIUM 5.3

DescriptionCVE.org

Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains an information disclosure vulnerability that allows unauthorized access to device hardware information by exploiting insecure API endpoints. Attackers can retrieve device serial numbers and MAC addresses through /device/devicePetRelation/getBoundDevices using pet IDs, enabling full device control without proper authorization checks.

AnalysisAI

Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains an information disclosure vulnerability that allows unauthorized access to device hardware information by exploiting insecure API endpoints. [CVSS 5.3 MEDIUM]

Technical ContextAI

Affects Petlibro. Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains an information disclosure vulnerability that allows unauthorized access to device hardware information by exploiting insecure API endpoints. Attackers can retrieve device serial numbers and MAC addresses through /device/devicePetRelation/getBoundDevices using pet IDs, enabling full device control without proper authorization checks.

RemediationAI

Monitor vendor advisories for a patch. Restrict network access to the affected service where possible.

More in Petlibro

View all
CVE-2025-3653 HIGH
7.3 Jan 04

Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains an improper access control vulnerability that allows u
CVE-2025-3646 HIGH
7.3 Jan 04

Petlibro versions up to 1.7.31 is affected by missing authentication for critical function (CVSS 7.3).
CVE-2025-15115 MEDIUM
6.5 Jan 04

Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains an authentication bypass vulnerability that allows una
CVE-2025-3660 MEDIUM
6.5 Jan 04

Petlibro versions up to 1.7.31 contains a vulnerability that allows attackers to access other users' pet data by exploit
CVE-2025-3652 MEDIUM
5.3 Jan 04

Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains an information disclosure vulnerability that allows un

Same weakness CWE-612 – Improper Authorization of Index Containing Sensitive Information

View all
CVE-2024-25635 HIGH POC
8.8
CVE-2019-25605 HIGH POC
8.7
CVE-2023-4560 MEDIUM POC
6.5
CVE-2022-35980 HIGH
7.5
CVE-2025-3653 HIGH
7.3
CVE-2025-3660 MEDIUM
6.5
CVE-2024-49071 MEDIUM
6.5
CVE-2022-41918 MEDIUM
6.3

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Share

CVE-2025-3654 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy