CVE-2015-8269

Published: Feb 4, 2016Modified: May 6, 2026

7.5

Vector

CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.6 / Impact: 5.9

Source: NVD

Description

The API on Fisher-Price Smart Toy Bear devices allows remote attackers to obtain sensitive information or modify data by leveraging presence in an 802.11 network's coverage area and entering an account number.

Affected (1)

Products: Fisher Price: Smart Toy Bear

Fisher Price

1 product

Smart Toy Bear

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Fisher Price Smart Toy Bear	All versions

Related CWEs

CWE-287

Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (6)

https://community.rapid7.com/community/infosec/blog/2016/02/02/security-vulnerabilities-within-fisher-price-smart-toy-hereo-gps-platform

Source: cret@cert.org

https://www.kb.cert.org/vuls/id/719736

Source: cret@cert.org

US Government Resource

https://www.kb.cert.org/vuls/id/GWAN-A6LPPW

Source: cret@cert.org

US Government Resource

https://community.rapid7.com/community/infosec/blog/2016/02/02/security-vulnerabilities-within-fisher-price-smart-toy-hereo-gps-platform

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.kb.cert.org/vuls/id/719736

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

https://www.kb.cert.org/vuls/id/GWAN-A6LPPW

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

Timeline

No history available yet.