Описание
An exploitable vulnerability exists in the /api/CONFIG/restore functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets can cause an arbitrary file to be overwritten. An attacker can send an HTTP request to trigger this vulnerability.
Ссылки
- ExploitTechnical DescriptionThird Party Advisory
- ExploitTechnical DescriptionThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
Одновременно
cpe:2.3:o:meetcircle:circle_with_disney_firmware:2.0.1:*:*:*:*:*:*:*
cpe:2.3:h:meetcircle:circle_with_disney:-:*:*:*:*:*:*:*
EPSS
Процентиль: 64%
0.00479
Низкий
9.9 Critical
CVSS3
8.8 High
CVSS3
9 Critical
CVSS2
Дефекты
CWE-59
Связанные уязвимости
CVSS3: 8.8
github
больше 3 лет назад
An exploitable vulnerability exists in the /api/CONFIG/restore functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets can cause an arbitrary file to be overwritten. An attacker can send an HTTP request to trigger this vulnerability.
EPSS
Процентиль: 64%
0.00479
Низкий
9.9 Critical
CVSS3
8.8 High
CVSS3
9 Critical
CVSS2
Дефекты
CWE-59