VULNERABILITY INTELLIGENCE
CVE-2015-8269
CVSS score7.5 HIGH
EPSS probability2.29%
CISA KEVNot currently listed
Published2016-02-04
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
The API on Fisher-Price Smart Toy Bear devices allows remote attackers to obtain sensitive information or modify data by leveraging presence in an 802.11 network's coverage area and entering an account number.
Weakness classification
- CWE-287: Improper Authentication
Primary references
- cret@cert.org
- cret@cert.org — US Government Resource
- cret@cert.org — US Government Resource
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108 — US Government Resource
- af854a3a-2127-422b-91ae-364da2661108 — US Government Resource