CVEvulnerability
CVE-2023-28704
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-06-02
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.8 HIGH — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-78
Description
Furbo dog camera has insufficient filtering for special parameter of device log management function. An unauthenticated remote attacker in the Bluetooth network with normal user privileges can exploit this vulnerability to perform command injection attack to execute arbitrary system commands or disrupt service.
Affected configurations
• furbo dog camera firmware 542
Related
Weakness · CWE (1)
- CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness
References
- https://www.twcert.org.tw/tw/cp-132-7153-68f52-1.html Third Party Advisory
- https://www.twcert.org.tw/tw/cp-132-7153-68f52-1.html Third Party Advisory