What is CVE-2017-12096?

CVE-2017-12096 is a medium-severity vulnerability in Circle Media, classified under Authentication Bypass by Spoofing. CVSS score: 6.5/10. Published 2017-11-07.

How severe is CVE-2017-12096?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Vulnerability in Circle Media

CVE-2017-12096

An exploitable vulnerability exists in the WiFi management of Circle with Disney. A crafted Access Point with the same name as the legitimate one can be used to make Circle connect to an untrusted network. An attacker needs to setup an Access Point reachable by the device and to send a series of spoofed "deauth" packets to trigger this vulnerability.

EPSS: 0.007 (48.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Circle Media — versions firmware 2.0.1
Meetcircle Circle_with_disney
Meetcircle Circle_with_disney_firmware — versions 2.0.1

Weakness classification (CWE)

CWE-290 — Authentication Bypass by Spoofing

References

talos-cna@cisco.com (Technical Description, Exploit, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2017-12096?: CVE-2017-12096 is a medium-severity vulnerability in Circle Media, classified under Authentication Bypass by Spoofing. CVSS score: 6.5/10. Published 2017-11-07.
How severe is CVE-2017-12096?: Medium severity. CVSS v3 base score is 6.5 out of 10.