Vulnerability Description
The API on Fisher-Price Smart Toy Bear devices allows remote attackers to obtain sensitive information or modify data by leveraging presence in an 802.11 network's coverage area and entering an account number.
CVSS Score
7.5
HIGH
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Fisher-Price | Smart Toy Bear | All versions |
Related Weaknesses (CWE)
References
- https://community.rapid7.com/community/infosec/blog/2016/02/02/security-vulnerab
- https://www.kb.cert.org/vuls/id/719736US Government Resource
- https://www.kb.cert.org/vuls/id/GWAN-A6LPPWUS Government Resource
- https://community.rapid7.com/community/infosec/blog/2016/02/02/security-vulnerab
- https://www.kb.cert.org/vuls/id/719736US Government Resource
- https://www.kb.cert.org/vuls/id/GWAN-A6LPPWUS Government Resource
FAQ
What is CVE-2015-8269?
CVE-2015-8269 is a vulnerability with a CVSS score of 7.5 (HIGH). The API on Fisher-Price Smart Toy Bear devices allows remote attackers to obtain sensitive information or modify data by leveraging presence in an 802.11 network's coverage area and entering an accoun...
How severe is CVE-2015-8269?
CVE-2015-8269 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2015-8269?
Check the references section above for vendor advisories and patch information. Affected products include: Fisher-Price Smart Toy Bear.