Stemosaur Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:cognitoys:stemosaur_firmware:*:*:*:*:*:*:*:*
part: o version: * update: *
| Vendor | Cognitoys (1c385adb-2e66-536e-be48-0bde3cd3e32d) |
|---|---|
| Product | Stemosaur Firmware (5a43cfeb-f555-568c-a815-2c094e70f47c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-8867 |
vulnerable | 2026-06-08 05:10:09.017122 |
Details available
Elemental Path's CogniToys Dino smart toys through firmware version 0.0.794 use AES-128 with ECB mode to encrypt voice traffic between the device and remote server, allowing a malicious user to map encrypted traffic to a particular AES key index and gaining further access to eavesdrop on privacy-sensitive voice communication of a child and their Dino device.
Published: 2017-12-11T21:00:00.000Z
Updated: 2024-08-05T16:48:22.864Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-8866 |
vulnerable | 2026-06-08 05:10:09.016676 |
Details available
Elemental Path's CogniToys Dino smart toys through firmware version 0.0.794 share a fixed small pool of hardcoded keys, allowing a remote attacker to use a different Dino device to decrypt VoIP traffic between a child's Dino and remote server.
Published: 2017-12-11T21:00:00.000Z
Updated: 2024-08-05T16:48:22.893Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-8865 |
vulnerable | 2026-06-08 05:10:09.015487 |
Details available
Elemental Path's CogniToys Dino smart toys through firmware version 0.0.794 do not provide sufficient protections against capture-replay attacks, allowing an attacker on the network to replay VoIP traffic between a Dino device and remote server to any other Dino device.
Published: 2017-12-11T21:00:00.000Z
Updated: 2024-08-05T16:48:22.893Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.