CVE-2017-2915

An exploitable vulnerability exists in the WiFi configuration functionality of Circle with Disney running firmware 2.0.1

Critical · published November 7, 2017

CVSS v3.0
9.0
EPSS
1%
Percentile
72.8
In the wild
Unconfirmed
What it is

An exploitable vulnerability exists in the WiFi configuration functionality of Circle with Disney running firmware 2.0.1. A specially crafted SSID can cause the device to execute arbitrary shell commands. An attacker needs to send a couple of HTTP requests and setup an access point reachable by the device to trigger this vulnerability.

The record
Technical detail
CVSS v3.0
9.0 · CRITICAL
Vector
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01441 · 72.8th percentile
Published
2017-11-07T16:00Z
EPSS history
Timeline
  • 07 NOV 16:00Z
    An exploitable vulnerability exists in the WiFi configuration functionality of Circle with Disney running firmware 2.0.1
    cvelistv5