What is CVE-2017-2882?

CVE-2017-2882 is a high-severity vulnerability in Circle Media. CVSS score: 8.1/10. Published 2017-11-07.

How severe is CVE-2017-2882?

High severity. CVSS v3 base score is 8.1 out of 10.

Vulnerability in Circle Media

CVE-2017-2882

An exploitable vulnerability exists in the servers update functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets can cause the device to overwrite sensitive files, resulting in code execution. An attacker needs to impersonate a remote server in order to trigger this vulnerability.

EPSS: 0.020 (79.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.1 (High). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Circle Media — versions firmware 2.0.1
Meetcircle Circle_with_disney
Meetcircle Circle_with_disney_firmware — versions 2.0.1

References

talos-cna@cisco.com (Technical Description, Exploit, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2017-2882?: CVE-2017-2882 is a high-severity vulnerability in Circle Media. CVSS score: 8.1/10. Published 2017-11-07.
How severe is CVE-2017-2882?: High severity. CVSS v3 base score is 8.1 out of 10.