CVE-2015-8269

The API on Fisher-Price Smart Toy Bear devices allows remote attackers to obtain sensitive information or modify data by leveraging presence in an 802.11 network's coverage area and entering an account number.

Score

CVSS 3.0 7.5 High

Status

Modified - cret@cert.org

Published

2016-02-04

Last modified

2024-08-06

Weaknesses

CWE-287

Affected products

• Smart Toy Bear (Fisher-price)

References

• https://community.rapid7.com/community/infosec/blog/2016/02/02/security-vulnerabilities-within-fisher-price-smart-toy-h…
• https://www.kb.cert.org/vuls/id/719736
• https://www.kb.cert.org/vuls/id/GWAN-A6LPPW