Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2017-2898

Опубликовано: 07 нояб. 2017
Источник: nvd
CVSS3: 9.9
CVSS3: 7.5
CVSS2: 8.5
EPSS Низкий

Описание

An exploitable vulnerability exists in the signature verification of the firmware update functionality of Circle with Disney. Specially crafted network packets can cause an unsigned firmware to be installed in the device resulting in arbitrary code execution. An attacker can send a series of packets to trigger this vulnerability.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:meetcircle:circle_with_disney_firmware:2.0.1:*:*:*:*:*:*:*
cpe:2.3:h:meetcircle:circle_with_disney:-:*:*:*:*:*:*:*

EPSS

Процентиль: 66%
0.00508
Низкий

9.9 Critical

CVSS3

7.5 High

CVSS3

8.5 High

CVSS2

Дефекты

CWE-362

Связанные уязвимости

github логотип

GHSA-mhxp-xvr8-vwjm

CVSS3: 7.5
github
больше 3 лет назад

An exploitable vulnerability exists in the signature verification of the firmware update functionality of Circle with Disney. Specially crafted network packets can cause an unsigned firmware to be installed in the device resulting in arbitrary code execution. An attacker can send a series of packets to trigger this vulnerability.

EPSS

Процентиль: 66%
0.00508
Низкий

9.9 Critical

CVSS3

7.5 High

CVSS3

8.5 High

CVSS2

Дефекты

CWE-362