CVE-2017-2883

CVE-2017-2883 (Circle with Disney, firmware 2.0.1) : The vulnerability lies in the device’s database update functionality, which fetches a database archive over HTTP from an unauthenticated server. A remote attacker who can impersonate download.meetcircle.co can serve a malicious update archive c...