Read the docs

Cognitoys

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Cognitoys records in CISA KEV

No Cognitoys vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Stemosaur Firmware 3 records LOW

Records

3 records

TI-2017-06373 CVE-2017-8865 · GHSA-h9fc-4c6m-98xj

Elemental Path's CogniToys Dino smart toys through firmware version 0.0.794 do not…

Priority LOW 28

Elemental Path's CogniToys Dino smart toys through firmware version 0.0.794 do not provide sufficient protections against capture-replay attacks, allowing an attacker on the network to replay VoIP traffic between a Dino…

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.00832 Published 2017-12-11 No fix listed CWE-200
TI-2017-06374 CVE-2017-8866 · GHSA-88r5-mxjg-5m25

Elemental Path's CogniToys Dino smart toys through firmware version 0.0.794 share a fixed…

Priority LOW 27

Elemental Path's CogniToys Dino smart toys through firmware version 0.0.794 share a fixed small pool of hardcoded keys, allowing a remote attacker to use a different Dino device to decrypt VoIP traffic between a child's…

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.00648 Published 2017-12-11 No fix listed CWE-327
Open these records in search →