Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4g7p-5pq3-g6vh

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.9

Описание

An exploitable vulnerability exists in the remote control functionality of Circle with Disney running firmware 2.0.1. SSL certificates for specific domain names can cause the goclient daemon to accept a different certificate than intended. An attacker can host an HTTPS server with this certificate to trigger this vulnerability.

An exploitable vulnerability exists in the remote control functionality of Circle with Disney running firmware 2.0.1. SSL certificates for specific domain names can cause the goclient daemon to accept a different certificate than intended. An attacker can host an HTTPS server with this certificate to trigger this vulnerability.

EPSS

Процентиль: 34%
0.00136
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-297

Связанные уязвимости

CVSS3: 5.9
nvd
больше 8 лет назад

An exploitable vulnerability exists in the remote control functionality of Circle with Disney running firmware 2.0.1. SSL certificates for specific domain names can cause the goclient daemon to accept a different certificate than intended. An attacker can host an HTTPS server with this certificate to trigger this vulnerability.

EPSS

Процентиль: 34%
0.00136
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-297