What is CVE-2017-12083?

CVE-2017-12083 is a medium-severity vulnerability in Circle Media, classified under Information Disclosure. CVSS score: 5.8/10. Published 2017-11-07.

How severe is CVE-2017-12083?

Medium severity. CVSS v3 base score is 5.8 out of 10.

Information disclosure in Circle Media

CVE-2017-12083

An exploitable information disclosure vulnerability exists in the apid daemon of the Circle with Disney running firmware 2.0.1. A specially crafted set of packets can make the Disney Circle dump strings from an internal database into an HTTP response. An attacker needs network connectivity to the Internet to trigger this vulnerability.

Vulnerability class: Information Disclosure

EPSS: 0.011 (63.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.8 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N.

Affected products

Circle Media — versions firmware 2.0.1
Meetcircle Circle_with_disney
Meetcircle Circle_with_disney_firmware — versions 2.0.1

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

talos-cna@cisco.com (Technical Description, Exploit, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2017-12083?: CVE-2017-12083 is a medium-severity vulnerability in Circle Media, classified under Information Disclosure. CVSS score: 5.8/10. Published 2017-11-07.
How severe is CVE-2017-12083?: Medium severity. CVSS v3 base score is 5.8 out of 10.