Skip to content
OpenAdvisories
Critical · 9.0 CVE-2017-2882 EUVD-2017-12023GHSA-wq48-5c3m-mr3m

An exploitable vulnerability exists in the servers update functionality of Circle with Disney running firmware 2.0.1. Specially crafted net…

Published Nov 7, 2017 · Updated Sep 16, 2024 · Assigned by talos

Description

An exploitable vulnerability exists in the servers update functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets can cause the device to overwrite sensitive files, resulting in code execution. An attacker needs to impersonate a remote server in order to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
Circle Media Circle firmware 2.0.1 —

References