CVE-2017-12083

An exploitable information disclosure vulnerability exists in the apid daemon of the Circle with Disney running firmware 2.0.1

Medium · published November 7, 2017

CVSS v3.0
5.8
EPSS
1%
Percentile
66.3
In the wild
Unconfirmed
What it is

An exploitable information disclosure vulnerability exists in the apid daemon of the Circle with Disney running firmware 2.0.1. A specially crafted set of packets can make the Disney Circle dump strings from an internal database into an HTTP response. An attacker needs network connectivity to the Internet to trigger this vulnerability.

The record
Technical detail
CVSS v3.0
5.8 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01144 · 66.3th percentile
Published
2017-11-07T16:00Z
EPSS history
Timeline
  • 07 NOV 16:00Z
    An exploitable information disclosure vulnerability exists in the apid daemon of the Circle with Disney running firmware 2.0.1
    cvelistv5