CVE-2017-2916

An exploitable vulnerability exists in the /api/CONFIG/restore functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets can cause an arbitrary file to be overwritten. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2017-2890: Improper Neutralization of Special Elements used in an OS Command

An exploitable vulnerability exists in the /api/CONFIG/restore functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets can cause an OS command injection. An attacker can send an HTTP request trigger this vulnerability...

PT-2017-15613

Name of the Vulnerable Software and Affected Versions Circle with Disney version 2.0.1 Description An issue exists in the "/api/CONFIG/restore" functionality where specially crafted network packets can cause an arbitrary file to be overwritten. An attacker can trigger this issue by sending an HTT...

CVE-2017-2916: Improper Link Resolution Before File Access

An exploitable vulnerability exists in the /api/CONFIG/restore functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets can cause an arbitrary file to be overwritten. An attacker can send an HTTP request to trigger this vulnerability...

PT-2017-15598

Name of the Vulnerable Software and Affected Versions Circle with Disney version 2.0.1 Description An issue exists in the "/api/CONFIG/restore" functionality, where specially crafted network packets can cause an OS command injection. An attacker can send an HTTP request to trigger this issue...