PT-2017-15588

Name of the Vulnerable Software and Affected Versions Circle with Disney affected versions not specified Description An issue exists in the "/api/CONFIG/backup" functionality, where specially crafted network packets can cause an OS command injection. An attacker can send an HTTP request to trigge...

CVE-2017-2916: Improper Link Resolution Before File Access

An exploitable vulnerability exists in the /api/CONFIG/restore functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets can cause an arbitrary file to be overwritten. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2017-2866: Improper Neutralization of Special Elements used in an OS Command

An exploitable vulnerability exists in the /api/CONFIG/backup functionality of Circle with Disney. Specially crafted network packets can cause an OS command injection. An attacker can send an HTTP request to trigger this vulnerability...

PT-2017-15598

Name of the Vulnerable Software and Affected Versions Circle with Disney version 2.0.1 Description An issue exists in the "/api/CONFIG/restore" functionality, where specially crafted network packets can cause an OS command injection. An attacker can send an HTTP request to trigger this issue...