CVE-2017-8867
Published Dec 11, 2017Elemental Path's CogniToys Dino smart toys through firmware version 0.0.794 use AES-128 with ECB mode to encrypt voice traffic between the device and remote server, allowing a mal…
Vendor/product archive
cognitoys / stemosaur_firmware CVEs
Beta · best-effort3 CVEs tagged to cognitoys / stemosaur_firmware — 0 Critical, 0 High, 3 Medium, 0 Low, 0 Unrated.
CVE-2017-8866
Published Dec 11, 2017Elemental Path's CogniToys Dino smart toys through firmware version 0.0.794 share a fixed small pool of hardcoded keys, allowing a remote attacker to use a different Dino device t…
CVE-2017-8865
Published Dec 11, 2017Elemental Path's CogniToys Dino smart toys through firmware version 0.0.794 do not provide sufficient protections against capture-replay attacks, allowing an attacker on the netwo…
Showing 1-3 of 3 CVEsPage 1 of 1