PT-2017-15606

Name of the Vulnerable Software and Affected Versions Circle with Disney affected versions not specified Description An issue exists in the signature verification of the firmware update functionality, allowing specially crafted network packets to cause an unsigned firmware to be installed,...

PT-2017-15591

Name of the Vulnerable Software and Affected Versions Circle with Disney version 2.0.1 Description An issue exists in the torlist update functionality, allowing specially crafted network packets to cause the product to run an attacker-supplied shell script. An attacker can intercept and alter...

PT-2017-12346

Name of the Vulnerable Software and Affected Versions Circle with Disney affected versions not specified Description A routing vulnerability exists in the Circle with Disney cloud infrastructure, allowing a specially crafted packet to be routed to any arbitrary Circle device. An attacker needs...

PT-2017-15592

Name of the Vulnerable Software and Affected Versions Circle with Disney version 2.0.1 Description An issue exists in the server's update functionality, allowing specially crafted network packets to cause the device to overwrite sensitive files, resulting in code execution. An attacker must...

CVE-2017-12084: Missing Authorization

A backdoor vulnerability exists in remote control functionality of Circle with Disney running firmware 2.0.1. A specific set of network packets can remotely start an SSH server on the device, resulting in a persistent backdoor. An attacker can send an API call to enable the SSH server...

CVE-2017-2916: Improper Link Resolution Before File Access

An exploitable vulnerability exists in the /api/CONFIG/restore functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets can cause an arbitrary file to be overwritten. An attacker can send an HTTP request to trigger this vulnerability...

PT-2017-15608

Name of the Vulnerable Software and Affected Versions Circle with Disney version 2.0.1 Description A vulnerability exists in the remote control functionality due to issues with SSL certificates for specific domain names, causing the rclient daemon to accept a different certificate than intended. ...

CVE-2017-2883: Undefined Security Weakness

An exploitable vulnerability exists in the database update functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets can cause the device to execute arbitrary code. An attacker needs to impersonate a remote server in order to trigger this vulnerability...

PT-2017-15610

Name of the Vulnerable Software and Affected Versions Circle with Disney affected versions not specified Description An issue exists in the filtering functionality where SSL certificates for specific domain names can cause the Bluecoat library to accept a different certificate than intended. This...

Circle with Disney Denial of Service Vulnerability (CNVD-2017-33240)

Circle with Disney is a set of network monitoring and management devices for monitoring children's online behavior from Circle Media, Inc. in the United States. A denial of service vulnerability exists in the API daemon in Circle with Disney version 2.0.1. The vulnerability can be exploited to...

Circle with Disney Remote Code Execution Vulnerability

Circle with Disney is a set of network monitoring and management devices for monitoring children's online behavior from Circle Media, Inc. in the United States. A remote code execution vulnerability exists in the torlist update feature in Circle with Disney version 2.0.1. The vulnerability can be...

Circle with Disney Remote Code Execution Vulnerability (CNVD-2017-33180)

Circle with Disney is a set of network monitoring and management devices for monitoring children's online behavior from Circle Media, Inc. in the United States. A remote code execution vulnerability exists in the database update feature in Circle with Disney version 2.0.1. The vulnerability can b...

Circle with Disney Command Injection Vulnerability

Circle with Disney is a set of network monitoring and management devices for monitoring children's online behavior from Circle Media, Inc. in the United States. A command injection vulnerability exists in the notification feature in Circle with Disney version 2.0.1. The vulnerability can be...

Circle with Disney Denial of Service Vulnerability

Circle with Disney is a set of network monitoring and management devices for monitoring children's online behavior from Circle Media, Inc. in the United States. A denial of service vulnerability exists in the user photo upload feature in Circle with Disney version 2.0.1. The vulnerability can be...

Circle with Disney SSL TLS Man-in-the-Middle Attack Vulnerability (CNVD-2017-33184)

Circle with Disney is a set of network monitoring and management devices for monitoring children's online behavior from Circle Media, Inc. in the United States. An SSL TLS man-in-the-middle attack vulnerability exists in the remote control feature in Circle with Disney version 2.0.1. An attacker...

Circle with Disney Authentication Bypass Vulnerability

Circle with Disney is a set of network monitoring and management devices for monitoring children's online behavior from Circle Media, Inc. in the United States. An authentication bypass vulnerability exists in the API daemon in Circle with Disney version 2.0.1. An attacker could bypass the...

Circle with Disney Command Injection Vulnerability (CNVD-2017-32880)

Circle with Disney is a set of network monitoring and management devices for monitoring children's online behavior from Circle Media, Inc. in the United States. A command injection vulnerability exists in the /api/CONFIG/restore function in Circle with Disney version 2.0.1. The vulnerability can ...

Circle with Disney Remote Code Execution Vulnerability

Circle with Disney is a set of network monitoring and management devices for monitoring children's online behavior from Circle Media, Inc. in the United States. A remote code execution vulnerability exists in the server update feature in Circle with Disney version 2.0.1. The vulnerability can be...

Circle with Disney SSL TLD Man-in-the-Middle Attack Vulnerability (CNVD-2017-33188)

Circle with Disney is a set of network monitoring and management devices for monitoring children's online behavior from Circle Media, Inc. in the United States. An SSL TLD man-in-the-middle attack vulnerability exists in the filtering feature in Circle with Disney version 2.0.1. An attacker could...

Circle with Disney Routing Vulnerability

Circle with Disney is a set of network monitoring and management devices for monitoring children's online behavior from Circle Media, Inc. in the United States. A routing vulnerability exists in the cloud infrastructure in Circle with Disney version 2.0.1. An attacker can exploit this vulnerabili...