CVE-2015-8269

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

The API on Fisher-Price Smart Toy Bear devices allows remote attackers to obtain sensitive information or modify data by leveraging presence in an 802.11 network's coverage area and entering an account number.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-287

Affected software

No affected versions have been published.

Timeline

Published: Feb 4, 2016
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2015

CVE-2015-82707.5The AMF3ReadString function in amf.c in RTMPDump 2.4 allows remote RTMP Media servers to cause a denial of service (invalid pointer derefere CVE-2015-82719.8The AMF3CD_AddProp function in amf.c in RTMPDump 2.4 allows remote RTMP Media servers to execute arbitrary code.CVE-2015-82726.5RTMPDump 2.4 allows remote attackers to trigger a denial of service (NULL pointer dereference and process crash).CVE-2015-82755.5LVRTC eParakstitajs 3.0 (1.3.0) and edoc-libraries-2.5.4_01 allow attackers to write to arbitrary files via crafted EDOC files.CVE-2015-82765.5LVRTC eParakstitajs 3.0 (1.3.0) and edoc-libraries-2.5.4_01 allow attackers to read arbitrary files via crafted EDOC files.CVE-2015-82779.8Multiple buffer overflows in (1) lmgrd and (2) Vendor Daemon in Flexera FlexNet Publisher before 11.13.1.2 Security Update 1 allow remote at CVE-2015-82798.6Web Viewer 1.0.0.193 on Samsung SRN-1670D devices allows remote attackers to read arbitrary files via a request to an unspecified PHP script CVE-2015-82807.5Web Viewer 1.0.0.193 on Samsung SRN-1670D devices allows remote attackers to discover credentials by reading detailed error messages.CVE-2015-82817.5Web Viewer 1.0.0.193 on Samsung SRN-1670D devices allows attackers to bypass filesystem encryption via XOR calculations.CVE-2015-82829.8SeaWell Networks Spectrum SDC 02.05.00 has a default password of "admin" for the "admin" account.CVE-2015-82836.5Directory traversal vulnerability in configure_manage.php in SeaWell Networks Spectrum SDC 02.05.00.CVE-2015-82848.8SeaWell Networks Spectrum SDC 02.05.00 allows remote viewer users to perform administrative functions.