Skip to content
OpenAdvisories
Critical · 9.0 CVE-2017-2883 EUVD-2017-12024GHSA-2grw-r8c3-3gwv

An exploitable vulnerability exists in the database update functionality of Circle with Disney running firmware 2.0.1. Specially crafted ne…

Published Nov 7, 2017 · Updated Sep 16, 2024 · Assigned by talos

Description

An exploitable vulnerability exists in the database update functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets can cause the device to execute arbitrary code. An attacker needs to impersonate a remote server in order to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
Circle Media Circle firmware 2.0.1 —

References