Skip to content
OpenAdvisories
Medium · 6.5 CVE-2017-12095 EUVD-2017-3681GHSA-v38j-rw68-vm56

An exploitable vulnerability exists in the WiFi Access Point feature of Circle with Disney running firmware 2.0.1. A series of WiFi packets…

Published Apr 5, 2018 · Updated Sep 16, 2024 · Assigned by talos

Description

An exploitable vulnerability exists in the WiFi Access Point feature of Circle with Disney running firmware 2.0.1. A series of WiFi packets can force Circle to setup an Access Point with default credentials. An attacker needs to send a series of spoofed "de-auth" packets to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
Circle Media Circle Circle with Disney 2.0.1 —

References