Unscored CVE-2015-8269 EUVD-2015-8157GHSA-7xv5-5f2f-vfq3

The API on Fisher-Price Smart Toy Bear devices allows remote attackers to obtain sensitive information or modify data by leveraging presenc…

Published Feb 4, 2016 · Updated Aug 6, 2024 · Assigned by certcc

Description

The API on Fisher-Price Smart Toy Bear devices allows remote attackers to obtain sensitive information or modify data by leveraging presence in an 802.11 network's coverage area and entering an account number.

References

https://www.kb.cert.org/vuls/id/GWAN-A6LPPW
https://community.rapid7.com/community/infosec/blog/2016/02/02/security-vulnerabilities-within-fisher-price-smart-toy-hereo-gps-platform
VU#719736 third-party-advisory