CVE-2023-28704
Furbo dog camera - Command Injection
Vexday Risk Score
21Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 8.8EPSS 1.0%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
02 Jun 2023Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Furbo dog camera has insufficient filtering for special parameter of device log management function. An unauthenticated remote attacker in the Bluetooth network with normal user privileges can exploit this vulnerability to perform command injection attack to execute arbitrary system commands or disrupt service.
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Furbo · dog camera fireware