CVE-2017-2883 in Circle with Disney
Сводка (Английский)
An exploitable vulnerability exists in the database update functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets can cause the device to execute arbitrary code. An attacker needs to impersonate a remote server in order to trigger this vulnerability.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Ответственный
Talos
Резервировать
01.12.2016
Раскрытие
07.11.2017
Статус
Подтверждённый
Записи
VulDB provides additional information and datapoints for this CVE:
| ИД | Уязвимость | CWE | Экс | Кон | CVE |
|---|---|---|---|---|---|
| 109201 | Circle with Disney Database Update эскалация привилегий | 264 | Не определено | Не определено | CVE-2017-2883 |