CVE-2017-8866

Publication date

2017-12-11 21:00:00

Family

mitre

State

PUBLISHED

Description

Elemental Paths CogniToys Dino smart toys through firmware version 0.0.794 share a fixed small pool of hardcoded keys, allowing a remote attacker to use a different Dino device to decrypt VoIP traffic between a childs Dino and remote server.