CVE-2017-12085

An exploitable routing vulnerability exists in the Circle with Disney cloud infrastructure

Critical · published November 7, 2017

CVSS v3.0
9.0
EPSS
2%
Percentile
76.5
In the wild
Unconfirmed
What it is

🚨 A crafty packet could reroute traffic to any Circle device, like a misdirected pizza delivery ending up at the wrong house! 🔥 Think of this vulnerability as a delivery service that blindly hands over packages to anyone who calls out the right address, without verifying if the person is really the intended recipient. It's a recipe for chaos when anyone can claim your data! An attacker with a simple Internet connection could take control of any Circle device, potentially spying on your family's activities or disrupting their connections. This could lead to unauthorized access and even manipulation of devices, wreaking havoc in your smart home environment!

Put simply

Think of this vulnerability as a delivery service that blindly hands over packages to anyone who calls out the right address, without verifying if the person is really the intended recipient. It's a recipe for chaos when anyone can claim your data! This routing vulnerability in the Circle with Disney cloud infrastructure allows attackers to send specially crafted packets that reroute traffic to arbitrary Circle devices, bypassing intended security measures.

What to do

An attacker with a simple Internet connection could take control of any Circle device, potentially spying on your family's activities or disrupting their connections. This could lead to unauthorized access and even manipulation of devices, wreaking havoc in your smart home environment! To mitigate this risk, ensure that the Circle device firmware is updated to the latest version. Additionally, monitor your network for unusual traffic patterns and consider implementing stricter access controls on your home network. 🛡️ You've got this! Stay proactive, follow these steps, and you'll keep your devices safe and sound! 💪😊

The record
Technical detail
CVSS v3.0
9.0 · CRITICAL
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01671 · 76.5th percentile
Published
2017-11-07T16:00Z
EPSS history
Timeline
  • 07 NOV 16:00Z
    An exploitable routing vulnerability exists in the Circle with Disney cloud infrastructure
    cvelistv5