An exploitable vulnerability exists in the /api/CONFIG/restore functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets can cause an arbitrary file to be overwritten. An attacker can send an HTTP request to trigger this vulnerability.
References
Link | Resource |
---|---|
https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0423 | Exploit Technical Description Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: talos
Published: 2017-10-31T00:00:00
Updated: 2022-04-19T18:24:48
Reserved: 2016-12-01T00:00:00
Link: CVE-2017-2916
JSON object: View
NVD Information
Status : Analyzed
Published: 2017-11-07T16:29:01.137
Modified: 2022-06-13T19:17:06.900
Link: CVE-2017-2916
JSON object: View
Redhat Information
No data.
CWE