Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Cognitoys Component: Stemosaur Firmware Clear all filters
TI-2017-06374 CVE-2017-8866 · GHSA-88r5-mxjg-5m25

Elemental Path's CogniToys Dino smart toys through firmware version 0.0.794 share a fixed…

Priority LOW 27

Elemental Path's CogniToys Dino smart toys through firmware version 0.0.794 share a fixed small pool of hardcoded keys, allowing a remote attacker to use a different Dino device to decrypt VoIP traffic between a child's…

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.00648 Published 2017-12-11 No fix listed CWE-327
TI-2017-06373 CVE-2017-8865 · GHSA-h9fc-4c6m-98xj

Elemental Path's CogniToys Dino smart toys through firmware version 0.0.794 do not…

Priority LOW 28

Elemental Path's CogniToys Dino smart toys through firmware version 0.0.794 do not provide sufficient protections against capture-replay attacks, allowing an attacker on the network to replay VoIP traffic between a Dino…

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.00832 Published 2017-12-11 No fix listed CWE-200