CogniToys STEMosaur
Approved changes feed: RSS · Atom
cpe:2.3:h:cognitoys:stemosaur:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Cognitoys (1c385adb-2e66-536e-be48-0bde3cd3e32d) |
|---|---|
| Product | Stemosaur (c1dcd34c-714e-5560-a159-46524675a289) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-8867 |
not_vulnerable | 2026-06-08 05:10:09.017143 |
Details available
Elemental Path's CogniToys Dino smart toys through firmware version 0.0.794 use AES-128 with ECB mode to encrypt voice traffic between the device and remote server, allowing a malicious user to map encrypted traffic to a particular AES key index and gaining further access to eavesdrop on privacy-sensitive voice communication of a child and their Dino device.
Published: 2017-12-11T21:00:00.000Z
Updated: 2024-08-05T16:48:22.864Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-8866 |
not_vulnerable | 2026-06-08 05:10:09.016803 |
Details available
Elemental Path's CogniToys Dino smart toys through firmware version 0.0.794 share a fixed small pool of hardcoded keys, allowing a remote attacker to use a different Dino device to decrypt VoIP traffic between a child's Dino and remote server.
Published: 2017-12-11T21:00:00.000Z
Updated: 2024-08-05T16:48:22.893Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-8865 |
not_vulnerable | 2026-06-08 05:10:09.016281 |
Details available
Elemental Path's CogniToys Dino smart toys through firmware version 0.0.794 do not provide sufficient protections against capture-replay attacks, allowing an attacker on the network to replay VoIP traffic between a Dino device and remote server to any other Dino device.
Published: 2017-12-11T21:00:00.000Z
Updated: 2024-08-05T16:48:22.893Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.