Beveiligingsadvies

CVE-2025-3654

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-01-03 23:33:04

Laatst bijgewerkt 2026-07-20 22:14:10

Toegewezen door VulnCheck

CVSS-score 6.9

Status PUBLISHED

Beschrijving

Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains an information disclosure vulnerability that allows unauthorized access to device hardware information by exploiting insecure API endpoints. Attackers can retrieve device serial numbers and MAC addresses through /device/devicePetRelation/getBoundDevices using pet IDs, enabling full device control without proper authorization checks.

← Alle CVE's bekijken Bekijk op cve.org ↗