- EPSS 6.48%
- Veröffentlicht 07.11.2017 16:29:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
An exploitable vulnerability exists in the /api/CONFIG/restore functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets can cause an OS command injection. An attacker can send an HTTP request trigger this vulnerab...
CVE-2017-2889
- EPSS 0.37%
- Veröffentlicht 07.11.2017 16:29:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
An exploitable Denial of Service vulnerability exists in the API daemon of Circle with Disney running firmware 2.0.1. A large amount of simultaneous TCP connections causes the APID daemon to repeatedly fork, causing the daemon to run out of memory an...
CVE-2017-12083
- EPSS 0.29%
- Veröffentlicht 07.11.2017 16:29:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
An exploitable information disclosure vulnerability exists in the apid daemon of the Circle with Disney running firmware 2.0.1. A specially crafted set of packets can make the Disney Circle dump strings from an internal database into an HTTP response...
CVE-2017-2883
- EPSS 0.99%
- Veröffentlicht 07.11.2017 16:29:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
An exploitable vulnerability exists in the database update functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets can cause the device to execute arbitrary code. An attacker needs to impersonate a remote server ...
CVE-2017-2882
- EPSS 1.2%
- Veröffentlicht 07.11.2017 16:29:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
An exploitable vulnerability exists in the servers update functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets can cause the device to overwrite sensitive files, resulting in code execution. An attacker needs ...
CVE-2017-2881
- EPSS 0.14%
- Veröffentlicht 07.11.2017 16:29:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
An exploitable vulnerability exists in the torlist update functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets can cause the product to run an attacker-supplied shell script. An attacker can intercept and alte...
- EPSS 4.63%
- Veröffentlicht 07.11.2017 16:29:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
An exploitable vulnerability exists in the /api/CONFIG/backup functionality of Circle with Disney. Specially crafted network packets can cause an OS command injection. An attacker can send an HTTP request to trigger this vulnerability.
CVE-2017-2865
- EPSS 0.13%
- Veröffentlicht 07.11.2017 16:29:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
An exploitable vulnerability exists in the firmware update functionality of Circle with Disney. Specially crafted network packets can cause the product to run an attacker-supplied shell script. An attacker can intercept and alter network traffic to t...
CVE-2017-2864
- EPSS 0.5%
- Veröffentlicht 07.11.2017 16:29:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
An exploitable vulnerability exists in the generation of authentication token functionality of Circle with Disney. Specially crafted network packets can cause a valid authentication token to be returned to the attacker resulting in authentication byp...
CVE-2017-12096
- EPSS 0.1%
- Veröffentlicht 07.11.2017 16:29:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
An exploitable vulnerability exists in the WiFi management of Circle with Disney. A crafted Access Point with the same name as the legitimate one can be used to make Circle connect to an untrusted network. An attacker needs to setup an Access Point r...