CVE-2025-3653: falha de média gravidade em Petlibrio Smart Pet Feeder Platform
Petlibro Smart Pet Feeder through 1.7.31 Platform Improper Access Control via API endpoint
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.9epss 0.3%
Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains an improper access control vulnerability that allows unauthorized device manipulation by accepting arbitrary serial numbers without ownership verification. Attackers can control any device by sending serial numbers to device control APIs to change feeding schedules, trigger manual feeds, access camera feeds, and modify device settings without authorization checks.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Produtos afetados
Petlibrio · Smart Pet Feeder PlatformCVEs relacionadas — Petlibrio Smart Pet Feeder Platform
No mesmo produto, das mais perigosas para as menos.
CVE-2025-15115MEDIUMPetlibro Smart Pet Feeder Platform through 1.7.31 Authentication Bypass via API endpointEPSS 0.3%CVE-2025-3654MEDIUMPetlibro Smart Pet Feeder Platform through 1.7.31 Information Disclosure via API endpointEPSS 0.3%CVE-2025-3652MEDIUMPetlibro Smart Pet Feeder Platform through 1.7.31 Audio Information Disclosure via API endpointEPSS 0.2%CVE-2025-3646MEDIUMPetlibro Smart Pet Feeder Platform through 1.7.31 Authorization Bypass via Device Share APIEPSS 0.2%CVE-2025-3660MEDIUMPetlibro Smart Pet Feeder Platform through 1.7.31 Broken Access Control via API endpointEPSS 0.2%