CVE-2017-12095

An exploitable vulnerability exists in the WiFi Access Point feature of Circle with Disney running firmware 2.0.1

Medium · published April 5, 2018

CVSS v3.0
6.5
EPSS
1%
Percentile
49.4
In the wild
Unconfirmed
What it is

An exploitable vulnerability exists in the WiFi Access Point feature of Circle with Disney running firmware 2.0.1. A series of WiFi packets can force Circle to setup an Access Point with default credentials. An attacker needs to send a series of spoofed "de-auth" packets to trigger this vulnerability.

The record
Technical detail
CVSS v3.0
6.5 · MEDIUM
Vector
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00632 · 49.4th percentile
Published
2018-04-05T19:00Z
EPSS history
Timeline
  • 05 APR 19:00Z
    An exploitable vulnerability exists in the WiFi Access Point feature of Circle with Disney running firmware 2.0.1
    cvelistv5