CVE-2025-3654: falha de média gravidade em Petlibrio Smart Pet Feeder Platform
Petlibro Smart Pet Feeder Platform through 1.7.31 Information Disclosure via API endpoint
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.9epss 0.3%
Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains an information disclosure vulnerability that allows unauthorized access to device hardware information by exploiting insecure API endpoints. Attackers can retrieve device serial numbers and MAC addresses through /device/devicePetRelation/getBoundDevices using pet IDs, enabling full device control without proper authorization checks.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Produtos afetados
Petlibrio · Smart Pet Feeder PlatformCVEs relacionadas — Petlibrio Smart Pet Feeder Platform
No mesmo produto, das mais perigosas para as menos.
CVE-2025-15115MEDIUMPetlibro Smart Pet Feeder Platform through 1.7.31 Authentication Bypass via API endpointEPSS 0.3%CVE-2025-3653MEDIUMPetlibro Smart Pet Feeder through 1.7.31 Platform Improper Access Control via API endpointEPSS 0.3%CVE-2025-3652MEDIUMPetlibro Smart Pet Feeder Platform through 1.7.31 Audio Information Disclosure via API endpointEPSS 0.2%CVE-2025-3646MEDIUMPetlibro Smart Pet Feeder Platform through 1.7.31 Authorization Bypass via Device Share APIEPSS 0.2%CVE-2025-3660MEDIUMPetlibro Smart Pet Feeder Platform through 1.7.31 Broken Access Control via API endpointEPSS 0.2%