Meetcircle Circle With Disney Firmware
23 CVEs affecting Meetcircle Circle With Disney Firmware. Latest disclosed: 2018-04-05. Critical: 2, High: 15.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-2864 | Critical | 9.8 | 2017-11-07 | An exploitable vulnerability exists in the generation of authentication token functionality of Circle with Disney. Specially crafted network packets can cause… |
CVE-2017-12085 | Critical | 9.0 | 2017-11-07 | An exploitable routing vulnerability exists in the Circle with Disney cloud infrastructure. A specially crafted packet can make the Circle cloud route a packet… |
CVE-2017-2917 | High | 8.8 | 2017-11-07 | An exploitable vulnerability exists in the notifications functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets can caus… |
CVE-2017-2916 | High | 8.8 | 2017-11-07 | An exploitable vulnerability exists in the /api/CONFIG/restore functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets ca… |
CVE-2017-2890 | High | 8.8 | 2017-11-07 | An exploitable vulnerability exists in the /api/CONFIG/restore functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets ca… |
CVE-2017-2881 | High | 8.8 | 2017-11-07 | An exploitable vulnerability exists in the torlist update functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets can cau… |
CVE-2017-2866 | High | 8.8 | 2017-11-07 | An exploitable vulnerability exists in the /api/CONFIG/backup functionality of Circle with Disney. Specially crafted network packets can cause an OS command in… |
CVE-2017-2914 | High | 8.1 | 2017-11-07 | An exploitable authentication bypass vulnerability exists in the API daemon of Circle with Disney running firmware 2.0.1. A specially crafted token can bypass… |
CVE-2017-2883 | High | 8.1 | 2017-11-07 | An exploitable vulnerability exists in the database update functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets can ca… |
CVE-2017-2882 | High | 8.1 | 2017-11-07 | An exploitable vulnerability exists in the servers update functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets can cau… |
CVE-2017-2915 | High | 8.0 | 2017-11-07 | An exploitable vulnerability exists in the WiFi configuration functionality of Circle with Disney running firmware 2.0.1. A specially crafted SSID can cause th… |
CVE-2017-12084 | High | 8.0 | 2017-11-07 | A backdoor vulnerability exists in remote control functionality of Circle with Disney running firmware 2.0.1. A specific set of network packets can remotely st… |
CVE-2017-2898 | High | 7.5 | 2017-11-07 | An exploitable vulnerability exists in the signature verification of the firmware update functionality of Circle with Disney. Specially crafted network packets… |
CVE-2017-2889 | High | 7.5 | 2017-11-07 | An exploitable Denial of Service vulnerability exists in the API daemon of Circle with Disney running firmware 2.0.1. A large amount of simultaneous TCP connec… |
CVE-2017-2884 | High | 7.5 | 2017-11-07 | An exploitable vulnerability exists in the user photo update functionality of Circle with Disney running firmware 2.0.1. A repeated set of specially crafted AP… |
CVE-2017-2865 | High | 7.5 | 2017-11-07 | An exploitable vulnerability exists in the firmware update functionality of Circle with Disney. Specially crafted network packets can cause the product to run… |
CVE-2017-12094 | High | 7.4 | 2017-11-07 | An exploitable vulnerability exists in the WiFi Channel parsing of Circle with Disney running firmware 2.0.1. A specially crafted SSID can cause the device to… |
CVE-2017-12095 | Medium | 6.5 | 2018-04-05 | An exploitable vulnerability exists in the WiFi Access Point feature of Circle with Disney running firmware 2.0.1. A series of WiFi packets can force Circle to… |
CVE-2017-12096 | Medium | 6.5 | 2017-11-07 | An exploitable vulnerability exists in the WiFi management of Circle with Disney. A crafted Access Point with the same name as the legitimate one can be used t… |
CVE-2017-2913 | Medium | 5.9 | 2017-11-07 | An exploitable vulnerability exists in the filtering functionality of Circle with Disney. SSL certificates for specific domain names can cause the Bluecoat lib… |