Skip to content
OpenAdvisories
High · 7.5 CVE-2017-2889 EUVD-2017-12030GHSA-7mgw-wjg9-2h5f

An exploitable Denial of Service vulnerability exists in the API daemon of Circle with Disney running firmware 2.0.1. A large amount of sim…

Published Nov 7, 2017 · Updated Sep 17, 2024 · Assigned by talos

Description

An exploitable Denial of Service vulnerability exists in the API daemon of Circle with Disney running firmware 2.0.1. A large amount of simultaneous TCP connections causes the APID daemon to repeatedly fork, causing the daemon to run out of memory and trigger a device reboot. An attacker needs network connectivity to the device to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
Circle Media Circle firmware 2.0.1 —

References