CVE-2017-8866
EUVD-2017-1780811.12.2017, 21:29
Elemental Path's CogniToys Dino smart toys through firmware version 0.0.794 share a fixed small pool of hardcoded keys, allowing a remote attacker to use a different Dino device to decrypt VoIP traffic between a child's Dino and remote server.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| cognitoys | stemosaur_firmware | 𝑥 ≤ 0.0.794 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration