Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mhxp-xvr8-vwjm

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

An exploitable vulnerability exists in the signature verification of the firmware update functionality of Circle with Disney. Specially crafted network packets can cause an unsigned firmware to be installed in the device resulting in arbitrary code execution. An attacker can send a series of packets to trigger this vulnerability.

An exploitable vulnerability exists in the signature verification of the firmware update functionality of Circle with Disney. Specially crafted network packets can cause an unsigned firmware to be installed in the device resulting in arbitrary code execution. An attacker can send a series of packets to trigger this vulnerability.

EPSS

Процентиль: 66%
0.00508
Низкий

7.5 High

CVSS3

Дефекты

CWE-362

Связанные уязвимости

CVSS3: 7.5
nvd
больше 8 лет назад

An exploitable vulnerability exists in the signature verification of the firmware update functionality of Circle with Disney. Specially crafted network packets can cause an unsigned firmware to be installed in the device resulting in arbitrary code execution. An attacker can send a series of packets to trigger this vulnerability.

EPSS

Процентиль: 66%
0.00508
Низкий

7.5 High

CVSS3

Дефекты

CWE-362