Multiple vulnerabilities in VTech DigiGo allow browser overlay attack
------------------------------
Sipke Mellema, September 2017
------------------------------
Abstract
------------------------------
VTech's DigiGo is a hand held smart device for children. The device
contains a browser that allows children to connect to websites on a
whitelist. Attackers can remotely add an entry to the whitelist to
perform a persistent overlay attack on the browser app.
------------------------------
Tested versions
------------------------------
This issue was tested on a VTech DigiGo running firmware version
83.60630. It is likely that other versions are also affected.
------------------------------
Fix
------------------------------
VTech pushed a firmware update to address this issue on 6 November,
2017. The firmware version still displays as 83.60630.
------------------------------
Details
------------------------------
https://sumofpwn.nl/advisory/2
Suppose you are concerned about the security of your VTech DigiGo device. In that case, I recommend contacting the manufacturer or a security professional for guidance on securing your device and protecting your personal information. Dissertation Proposal Writing Services
AtsakytiPanaikinti