CVE-2017-12084

A backdoor vulnerability exists in remote control functionality of Circle with Disney running firmware 2.0.1. A specific set of network packets can remotely start an SSH server on the device, resulting in a persistent backdoor. An attacker can send an API call to enable the SSH server...

CVE-2017-2890

An exploitable vulnerability exists in the /api/CONFIG/restore functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets can cause an OS command injection. An attacker can send an HTTP request trigger this vulnerability...

CVE-2017-2864

An exploitable vulnerability exists in the generation of authentication token functionality of Circle with Disney. Specially crafted network packets can cause a valid authentication token to be returned to the attacker resulting in authentication bypass. An attacker can send a series of packets t...

PT-2017-15610

Name of the Vulnerable Software and Affected Versions Circle with Disney affected versions not specified Description An issue exists in the filtering functionality where SSL certificates for specific domain names can cause the Bluecoat library to accept a different certificate than intended. This...

PT-2017-15614

Name of the Vulnerable Software and Affected Versions Circle with Disney version 2.0.1 Description An issue exists in the notifications functionality, where specially crafted network packets can cause an OS command injection. An attacker can send an HTTP request to trigger this issue...

PT-2017-12348

Name of the Vulnerable Software and Affected Versions Circle with Disney version 2.0.1 Description A vulnerability exists in the WiFi Channel parsing of the device. It can be exploited by a specially crafted SSID, which can cause the device to execute arbitrary sed commands. An attacker needs to...

PT-2017-15612

Name of the Vulnerable Software and Affected Versions Circle with Disney version 2.0.1 Description A specially crafted SSID can cause the device to execute arbitrary shell commands, due to an issue in the WiFi configuration functionality. An attacker needs to send a couple of HTTP requests and se...

PT-2017-12345

Name of the Vulnerable Software and Affected Versions Circle with Disney version 2.0.1 Description A backdoor issue exists in the remote control functionality, allowing an attacker to send a specific set of network packets to remotely start an SSH server on the device. This results in a persisten...

PT-2017-12344

Name of the Vulnerable Software and Affected Versions Circle with Disney version 2.0.1 Description An information disclosure issue exists in the apid daemon, where a specially crafted set of packets can cause the device to dump internal database strings into an HTTP response. This can be triggere...

PT-2017-15608

Name of the Vulnerable Software and Affected Versions Circle with Disney version 2.0.1 Description A vulnerability exists in the remote control functionality due to issues with SSL certificates for specific domain names, causing the rclient daemon to accept a different certificate than intended. ...

PT-2017-15606

Name of the Vulnerable Software and Affected Versions Circle with Disney affected versions not specified Description An issue exists in the signature verification of the firmware update functionality, allowing specially crafted network packets to cause an unsigned firmware to be installed,...

PT-2017-15598

Name of the Vulnerable Software and Affected Versions Circle with Disney version 2.0.1 Description An issue exists in the "/api/CONFIG/restore" functionality, where specially crafted network packets can cause an OS command injection. An attacker can send an HTTP request to trigger this issue...

PT-2017-12349 · Disney · Circle With Disney

Name of the Vulnerable Software and Affected Versions: Circle with Disney affected versions not specified Description: A vulnerability exists in the WiFi management of Circle with Disney, allowing an attacker to connect the device to an untrusted network. This can be achieved by setting up a...

PT-2017-15594

Name of the Vulnerable Software and Affected Versions Circle with Disney version 2.0.1 Description A vulnerability exists in the user photo update functionality, allowing a repeated set of specially crafted API calls to corrupt essential memory and result in a bricked device. An attacker needs...

CVE-2017-2916: Improper Link Resolution Before File Access

An exploitable vulnerability exists in the /api/CONFIG/restore functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets can cause an arbitrary file to be overwritten. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2017-2914: Improper Authentication

An exploitable authentication bypass vulnerability exists in the API daemon of Circle with Disney running firmware 2.0.1. A specially crafted token can bypass the authentication routine of the Apid binary, causing the device to grant unintended administrative access. An attacker needs network...

CVE-2017-2913: Improper Certificate Validation

An exploitable vulnerability exists in the filtering functionality of Circle with Disney. SSL certificates for specific domain names can cause the Bluecoat library to accept a different certificate than intended. An attacker can host an HTTPS server with this certificate to trigger this...

CVE-2017-2912: Improper Validation of Certificate with Host Mismatch

An exploitable vulnerability exists in the remote control functionality of Circle with Disney running firmware 2.0.1. SSL certificates for specific domain names can cause the goclient daemon to accept a different certificate than intended. An attacker can host an HTTPS server with this certificat...

CVE-2017-2911: Improper Validation of Certificate with Host Mismatch

An exploitable vulnerability exists in the remote control functionality of Circle with Disney running firmware 2.0.1. SSL certificates for specific domain names can cause the rclient daemon to accept a different certificate than intended. An attacker can host an HTTPS server with this certificate...

CVE-2017-2890: Improper Neutralization of Special Elements used in an OS Command

An exploitable vulnerability exists in the /api/CONFIG/restore functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets can cause an OS command injection. An attacker can send an HTTP request trigger this vulnerability...