CVE-2017-8866

2017-12-1121:00:00

mitre

www.cve.org

5.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.7%

JSON

Elemental Path’s CogniToys Dino smart toys through firmware version 0.0.794 share a fixed small pool of hardcoded keys, allowing a remote attacker to use a different Dino device to decrypt VoIP traffic between a child’s Dino and remote server.

References

dl.acm.org/citation.cfm?id=3139947