high7.5
CVE-2015-8269
The API on Fisher-Price Smart Toy Bear devices allows remote attackers to obtain sensitive information or modify data by leveraging presence in an 802.11 netwo…
Impact
The API on Fisher-Price Smart Toy Bear devices allows remote attackers to obtain sensitive information or modify data by leveraging presence in an 802.11 network's coverage area and entering an account number.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fisher-Price | Smart Toy Bear | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://community.rapid7.com/community/infosec/blog/2016/02/02/security-vulnerabilities-within-fisher-price-smart-toy-hereo-gps-platform
- https://www.kb.cert.org/vuls/id/719736
- https://www.kb.cert.org/vuls/id/GWAN-A6LPPW
- https://community.rapid7.com/community/infosec/blog/2016/02/02/security-vulnerabilities-within-fisher-price-smart-toy-hereo-gps-platform
- https://www.kb.cert.org/vuls/id/719736
- https://www.kb.cert.org/vuls/id/GWAN-A6LPPW