What is CVE-2017-2883?

CVE-2017-2883 is a high-severity vulnerability in Circle Media. CVSS score: 8.1/10. Published 2017-11-07.

How severe is CVE-2017-2883?

High severity. CVSS v3 base score is 8.1 out of 10.

Vulnerability in Circle Media

CVE-2017-2883

An exploitable vulnerability exists in the database update functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets can cause the device to execute arbitrary code. An attacker needs to impersonate a remote server in order to trigger this vulnerability.

EPSS: 0.024 (82.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.1 (High). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Circle Media — versions firmware 2.0.1
Meetcircle Circle_with_disney
Meetcircle Circle_with_disney_firmware — versions 2.0.1

References

talos-cna@cisco.com (Technical Description, Exploit, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2017-2883?: CVE-2017-2883 is a high-severity vulnerability in Circle Media. CVSS score: 8.1/10. Published 2017-11-07.
How severe is CVE-2017-2883?: High severity. CVSS v3 base score is 8.1 out of 10.