Elemental Path's CogniToys Dino Information Disclosure Vulnerability

Elemental Path's CogniToys Dino is a smart toy from Elemental Path's in the United States that is capable of voice communication with children. An information disclosure vulnerability exists in the Elemental Path CogniToys Dino using firmware version 0.0.794 and earlier. An attacker could use thi...

CVE-2017-8866

Elemental Path's CogniToys Dino smart toys through firmware version 0.0.794 share a fixed small pool of hardcoded keys, allowing a remote attacker to use a different Dino device to decrypt VoIP traffic between a child's Dino and remote server...