Approved changes feed: RSS · Atom
cpe:2.3:a:circle_media:circle:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Circle Media (4e35c23b-6427-5431-ab92-f49d83cace4d) |
|---|---|
| Product | Circle (87ff1500-a072-5052-ba32-1c1ede7f6b2e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-2917 |
vulnerable | 2026-06-08 05:09:26.138305 |
Details available
CRITICAL (9.9)
An exploitable vulnerability exists in the notifications functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets can cause an OS command injection. An attacker can send an HTTP request to trigger this vulnerability.
Published: 2017-11-07T16:00:00.000Z
Updated: 2024-09-16T20:43:28.399Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-2916 |
vulnerable | 2026-06-08 05:09:26.137966 |
Details available
CRITICAL (9.9)
An exploitable vulnerability exists in the /api/CONFIG/restore functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets can cause an arbitrary file to be overwritten. An attacker can send an HTTP request to trigger this vulnerability.
Published: 2017-11-07T16:00:00.000Z
Updated: 2024-09-17T04:00:28.316Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-2915 |
vulnerable | 2026-06-08 05:09:26.137643 |
Details available
CRITICAL (9)
An exploitable vulnerability exists in the WiFi configuration functionality of Circle with Disney running firmware 2.0.1. A specially crafted SSID can cause the device to execute arbitrary shell commands. An attacker needs to send a couple of HTTP requests and setup an access point reachable by the device to trigger this vulnerability.
Published: 2017-11-07T16:00:00.000Z
Updated: 2024-09-17T04:20:26.677Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-2914 |
vulnerable | 2026-06-08 05:09:26.137311 |
Details available
CRITICAL (9)
An exploitable authentication bypass vulnerability exists in the API daemon of Circle with Disney running firmware 2.0.1. A specially crafted token can bypass the authentication routine of the Apid binary, causing the device to grant unintended administrative access. An attacker needs network connectivity to the device to trigger this vulnerability.
Published: 2017-11-07T16:00:00.000Z
Updated: 2024-09-16T23:12:00.909Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-2913 |
vulnerable | 2026-06-08 05:09:26.136976 |
Details available
HIGH (8.1)
An exploitable vulnerability exists in the filtering functionality of Circle with Disney. SSL certificates for specific domain names can cause the Bluecoat library to accept a different certificate than intended. An attacker can host an HTTPS server with this certificate to trigger this vulnerability.
Published: 2017-11-07T16:00:00.000Z
Updated: 2024-09-16T22:41:16.454Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-2912 |
vulnerable | 2026-06-08 05:09:26.136622 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-2911 |
vulnerable | 2026-06-08 05:09:26.136255 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-2898 |
vulnerable | 2026-06-08 05:09:26.123409 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-2890 |
vulnerable | 2026-06-08 05:09:26.114459 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-2889 |
vulnerable | 2026-06-08 05:09:26.114084 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-2884 |
vulnerable | 2026-06-08 05:09:26.099986 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-2883 |
vulnerable | 2026-06-08 05:09:26.099650 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-2882 |
vulnerable | 2026-06-08 05:09:26.099307 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-2881 |
vulnerable | 2026-06-08 05:09:26.098916 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-2866 |
vulnerable | 2026-06-08 05:09:26.086932 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-2865 |
vulnerable | 2026-06-08 05:09:26.086564 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-2864 |
vulnerable | 2026-06-08 05:09:26.084901 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-12096 |
vulnerable | 2026-06-08 05:08:45.285371 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-12095 |
vulnerable | 2026-06-08 05:08:45.284895 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-12094 |
vulnerable | 2026-06-08 05:08:45.282920 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-12085 |
vulnerable | 2026-06-08 05:08:38.718125 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-12084 |
vulnerable | 2026-06-08 05:08:38.717629 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-12083 |
vulnerable | 2026-06-08 05:08:38.715840 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.