CVE-2015-8269

N/A

Descricao

The API on Fisher-Price Smart Toy Bear devices allows remote attackers to obtain sensitive information or modify data by leveraging presence in an 802.11 network's coverage area and entering an account number.

Detalhes CVE

Pontuacao CVSS v3.1N/A

Publicado2/4/2016

Ultima modificacao4/12/2025

Fontenvd

Avistamentos honeypot0

Produtos afetados

fisher-price:smart_toy_bear

Fraquezas (CWE)

CWE-287

Referencias

https://community.rapid7.com/community/infosec/blog/2016/02/02/security-vulnerabilities-within-fisher-price-smart-toy-hereo-gps-platform(cret@cert.org)

https://www.kb.cert.org/vuls/id/719736(cret@cert.org)

https://www.kb.cert.org/vuls/id/GWAN-A6LPPW(cret@cert.org)

https://community.rapid7.com/community/infosec/blog/2016/02/02/security-vulnerabilities-within-fisher-price-smart-toy-hereo-gps-platform(af854a3a-2127-422b-91ae-364da2661108)

https://www.kb.cert.org/vuls/id/719736(af854a3a-2127-422b-91ae-364da2661108)

https://www.kb.cert.org/vuls/id/GWAN-A6LPPW(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.