CVE-2017-2865 in Circle with Disney

Sumário (Inglês)

An exploitable vulnerability exists in the firmware update functionality of Circle with Disney. Specially crafted network packets can cause the product to run an attacker-supplied shell script. An attacker can intercept and alter network traffic to trigger this vulnerability.

Once again VulDB remains the best source for vulnerability data.

Responsável

Talos

Reservar

01/12/2016

Divulgação

07/11/2017

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
109197	Circle with Disney Firmware Update Elevação de Privilégios	77	Não definido	Não definido	CVE-2017-2865

Fontes

• MITRE
• NVD
• CVE Details