LeapFrog

LeapFrog, a popular children’s toy making company was susceptible to a variety of attacks that leverage Adobe Flash vulnerabilities.

Adobe Flash version of toy contains a well known vulnerability that could allow an attacker to execute arbitrary code on a machine.

Carthy investigated the bug and recommended that the company institute mandatory updates upon initial device configuration and replace Adobe Flash with HTML 5.

Source: https://grahamcluley.com/leapfrog-childs-toy-susceptible-attacks-leveraging-adobe-flash/

TPRM report: https://scoringcyber.rankiteo.com/company/leapfrog

"id": "lea152822522",
"linkid": "leapfrog",
"type": "Vulnerability",
"date": "03/2016",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"

{'affected_entities': [{'industry': "Children's Toys",
                        'name': 'LeapFrog',
                        'type': 'Company'}],
 'attack_vector': 'Adobe Flash Vulnerability',
 'description': 'LeapFrog, a popular children’s toy making company, was '
                'susceptible to a variety of attacks that leverage Adobe Flash '
                'vulnerabilities. The Adobe Flash version of the toy contains '
                'a well-known vulnerability that could allow an attacker to '
                'execute arbitrary code on a machine. Carthy investigated the '
                'bug and recommended that the company institute mandatory '
                'updates upon initial device configuration and replace Adobe '
                'Flash with HTML 5.',
 'recommendations': ['Institute mandatory updates upon initial device '
                     'configuration',
                     'Replace Adobe Flash with HTML 5'],
 'response': {'remediation_measures': ['Institute mandatory updates upon '
                                       'initial device configuration',
                                       'Replace Adobe Flash with HTML 5']},
 'title': 'LeapFrog Toy Vulnerability',
 'type': 'Vulnerability Exploitation',
 'vulnerability_exploited': 'Adobe Flash Vulnerability'}