CVE-2017-2916

🗓️ 07 Nov 2017 16:00:00Reported by talosType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 73 Views🌐 WEB

An exploitable vulnerability in Circle with Disney firmware 2.0.1 allows arbitrary file overwrite via specially crafted network packets

Reporter	Title	Published	Views	Family All 9
CNVD	Circle with Disney Backlink Vulnerability	2 Nov 201700:00	–	cnvd
Cvelist	CVE-2017-2916	7 Nov 201716:00	–	cvelist
EUVD	EUVD-2017-12057	7 Oct 202500:30	–	euvd
NVD	CVE-2017-2916	7 Nov 201716:29	–	nvd
OSV	CVE-2017-2916	7 Nov 201716:29	–	osv
Prion	Cross site request forgery (csrf)	7 Nov 201716:29	–	prion
seebug.org	Circle with Disney Configuration Restore Photos File Overwrite Vulnerability(CVE-2017-2916)	8 Nov 201700:00	–	seebug
Talos	Circle with Disney Configuration Restore Photos File Overwrite Vulnerability	31 Oct 201700:00	–	talos
Talos Blog	Vulnerability Spotlight: The Circle of a Bug’s Life	31 Oct 201712:04	–	talosblog

NVD

Node

AND

meetcircle circle_with_disney_firmwareMatch2.0.1

meetcircle circle_with_disneyMatch-

[
  {
    "product": "Circle",
    "vendor": "Circle Media",
    "versions": [
      {
        "status": "affected",
        "version": "firmware 2.0.1"
      }
    ]
  }
]

Source	Link
talosintelligence	www.talosintelligence.com/vulnerability_reports/TALOS-2017-0423

Parameter	Position	Path	Description	CWE
token	request body	/api/CONFIG/restore	Restore configuration backup via /api/CONFIG/restore can lead to arbitrary file overwrite during backup extraction when crafted backups are supplied.	CWE-59
appid	request body	/api/CONFIG/restore	Restore configuration backup via /api/CONFIG/restore can lead to arbitrary file overwrite during backup extraction when crafted backups are supplied.	CWE-59
upload	request body	/api/CONFIG/restore	Restore configuration backup via /api/CONFIG/restore can lead to arbitrary file overwrite during backup extraction when crafted backups are supplied.	CWE-59
token	request body	/api/UPDATE/users/user/photo	Overwriting user photos via /api/UPDATE/users/user/photo can overwrite arbitrary files if a symbolic link is used in the backup photos path during restore.	CWE-59
user.pid	request body	/api/UPDATE/users/user/photo	Overwriting user photos via /api/UPDATE/users/user/photo can overwrite arbitrary files if a symbolic link is used in the backup photos path during restore.	CWE-59
photo	request body	/api/UPDATE/users/user/photo	Overwriting user photos via /api/UPDATE/users/user/photo can overwrite arbitrary files if a symbolic link is used in the backup photos path during restore.	CWE-59