Leapfrog Children’s Tablet Owners Should Remove Pet Chat Now

guest · Aug 7, 2019

Leapfrog Children’s Tablet Owners Should Remove Pet Chat Now
August 7, 2019
https://www.bleepingcomputer.com/ne...n-s-tablet-owners-should-remove-pet-chat-now/

Several vulnerabilities in apps available for LeapFrog's LeapPad tablets for children could be used to locate kids, interact with them, or phish parents for sensitive info. The tablets themselves did not use HTTPS, exposing them to packet sniffing.
Pet Chat communication is open
Security researchers at Checkmarx discovered that the Pet Chat app on LeapPad Ultimate can expose the location of the table, and thus the kid's, under certain conditions.
The app is developed with children safety in mind and it enables kids to talk to one another in a chat room using preset phrases and emoticons.

The MitM attack would also work to spoof information displayed in LeapPad Ultimate's LeapSearch - a "child-safe web browser that provides access to safe web content."

"By injecting pieces of real data retrieved in the previous step, we created a “phishing version” of the LeapSearch portal which appears to be legit."
Click to expand...

Checkmarx: LeapFrog LeapPad Ultimate Security Vulnerabilities

Log in or Sign up

Leapfrog Children’s Tablet Owners Should Remove Pet Chat Now

guest Guest

Log in or Sign up

Leapfrog Children’s Tablet Owners Should Remove Pet Chat Now

guest Guest

Useful Searches