CVE-2017-12083

An exploitable information disclosure vulnerability exists in the apid daemon of the Circle with Disney running firmware 2.0.1. A specially crafted set of packets can make the Disney Circle dump strings from an internal database into an HTTP response. An attacker needs network connectivity to the Internet to trigger this vulnerability.

Score

CVSS 3.0 5.8 Medium

Status

Modified - talos-cna@cisco.com

Published

2017-11-07

Last modified

2024-09-17

Weaknesses

CWE-200

Affected products

• Circle (Circle Media)
• Circle With Disney Firmware (Meetcircle)

References

• https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0435