CVE-2017-2883 in Circle with Disney
Summary
An exploitable vulnerability exists in the database update functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets can cause the device to execute arbitrary code. An attacker needs to impersonate a remote server in order to trigger this vulnerability.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Responsible
Talos
Reservation
12/01/2016
Disclosure
11/07/2017
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 109201 | Circle with Disney Database Update access control | 264 | Not defined | Not defined | CVE-2017-2883 |