VULNERABILITY INTELLIGENCE

CVE-2023-28704

CVSS score8.8 HIGH
EPSS probability1.00%
CISA KEVNot currently listed
Published2023-06-02
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Furbo dog camera has insufficient filtering for special parameter of device log management function. An unauthenticated remote attacker in the Bluetooth network with normal user privileges can exploit this vulnerability to perform command injection attack to execute arbitrary system commands or disrupt service.

Weakness classification

  • twcert@cert.org.tw: CWE-78

Primary references