Approved changes feed: RSS · Atom

cpe:2.3:o:meetcircle:circle_with_disney_firmware:2.0.1:*:*:*:*:*:*:*

part: o version: 2.0.1 update: *

VendorMeetcircle (f8586ab8-7072-54f6-9fdd-9ad60d298df1)
ProductCircle With Disney Firmware (b3725b2b-2ede-5761-82cd-e143adaa873b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-2917 vulnerable 2026-06-08 05:09:26.138334 Details available
CRITICAL (9.9)
An exploitable vulnerability exists in the notifications functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets can cause an OS command injection. An attacker can send an HTTP request to trigger this vulnerability.
Published: 2017-11-07T16:00:00.000Z
Updated: 2024-09-16T20:43:28.399Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-2916 vulnerable 2026-06-08 05:09:26.138000 Details available
CRITICAL (9.9)
An exploitable vulnerability exists in the /api/CONFIG/restore functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets can cause an arbitrary file to be overwritten. An attacker can send an HTTP request to trigger this vulnerability.
Published: 2017-11-07T16:00:00.000Z
Updated: 2024-09-17T04:00:28.316Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-2915 vulnerable 2026-06-08 05:09:26.137670 Details available
CRITICAL (9)
An exploitable vulnerability exists in the WiFi configuration functionality of Circle with Disney running firmware 2.0.1. A specially crafted SSID can cause the device to execute arbitrary shell commands. An attacker needs to send a couple of HTTP requests and setup an access point reachable by the device to trigger this vulnerability.
Published: 2017-11-07T16:00:00.000Z
Updated: 2024-09-17T04:20:26.677Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-2914 vulnerable 2026-06-08 05:09:26.137340 Details available
CRITICAL (9)
An exploitable authentication bypass vulnerability exists in the API daemon of Circle with Disney running firmware 2.0.1. A specially crafted token can bypass the authentication routine of the Apid binary, causing the device to grant unintended administrative access. An attacker needs network connectivity to the device to trigger this vulnerability.
Published: 2017-11-07T16:00:00.000Z
Updated: 2024-09-16T23:12:00.909Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-2913 vulnerable 2026-06-08 05:09:26.137006 Details available
HIGH (8.1)
An exploitable vulnerability exists in the filtering functionality of Circle with Disney. SSL certificates for specific domain names can cause the Bluecoat library to accept a different certificate than intended. An attacker can host an HTTPS server with this certificate to trigger this vulnerability.
Published: 2017-11-07T16:00:00.000Z
Updated: 2024-09-16T22:41:16.454Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-2912 vulnerable 2026-06-08 05:09:26.136657 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-2911 vulnerable 2026-06-08 05:09:26.136292 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-2898 vulnerable 2026-06-08 05:09:26.123446 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-2890 vulnerable 2026-06-08 05:09:26.114491 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-2889 vulnerable 2026-06-08 05:09:26.114122 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-2884 vulnerable 2026-06-08 05:09:26.100015 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-2883 vulnerable 2026-06-08 05:09:26.099679 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-2882 vulnerable 2026-06-08 05:09:26.099340 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-2881 vulnerable 2026-06-08 05:09:26.098957 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-2866 vulnerable 2026-06-08 05:09:26.086968 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-2865 vulnerable 2026-06-08 05:09:26.086602 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-2864 vulnerable 2026-06-08 05:09:26.085619 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-12096 vulnerable 2026-06-08 05:08:45.285405 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-12095 vulnerable 2026-06-08 05:08:45.284945 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-12094 vulnerable 2026-06-08 05:08:45.283729 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-12085 vulnerable 2026-06-08 05:08:38.718164 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-12084 vulnerable 2026-06-08 05:08:38.717673 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-12083 vulnerable 2026-06-08 05:08:38.716439 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.