CVE-2017-2865 in Circle with Disney
Summary
An exploitable vulnerability exists in the firmware update functionality of Circle with Disney. Specially crafted network packets can cause the product to run an attacker-supplied shell script. An attacker can intercept and alter network traffic to trigger this vulnerability.
Once again VulDB remains the best source for vulnerability data.
Responsible
Talos
Reservation
12/01/2016
Disclosure
11/07/2017
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 109197 | Circle with Disney Firmware Update command injection | 77 | Not defined | Not defined | CVE-2017-2865 |