An exploitable vulnerability exists in the servers update functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets can cause the device to overwrite sensitive files, resulting in code execution. An attacker needs to impersonate a remote server in order to trigger this vulnerability.
References
Link | Resource |
---|---|
https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0389 | Exploit Technical Description Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: talos
Published: 2017-10-31T00:00:00
Updated: 2022-04-19T18:24:06
Reserved: 2016-12-01T00:00:00
Link: CVE-2017-2882
JSON object: View
NVD Information
Status : Analyzed
Published: 2017-11-07T16:29:00.543
Modified: 2022-06-03T19:06:40.150
Link: CVE-2017-2882
JSON object: View
Redhat Information
No data.
CWE