Filtered by vendor Meetcircle Subscriptions
Total 23 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2017-12085 1 Meetcircle 2 Circle With Disney, Circle With Disney Firmware 2024-11-21 N/A
An exploitable routing vulnerability exists in the Circle with Disney cloud infrastructure. A specially crafted packet can make the Circle cloud route a packet to any arbitrary Circle device. An attacker needs network connectivity to the Internet to trigger this vulnerability.
CVE-2017-12084 1 Meetcircle 2 Circle With Disney, Circle With Disney Firmware 2024-11-21 N/A
A backdoor vulnerability exists in remote control functionality of Circle with Disney running firmware 2.0.1. A specific set of network packets can remotely start an SSH server on the device, resulting in a persistent backdoor. An attacker can send an API call to enable the SSH server.
CVE-2017-12083 1 Meetcircle 2 Circle With Disney, Circle With Disney Firmware 2024-11-21 N/A
An exploitable information disclosure vulnerability exists in the apid daemon of the Circle with Disney running firmware 2.0.1. A specially crafted set of packets can make the Disney Circle dump strings from an internal database into an HTTP response. An attacker needs network connectivity to the Internet to trigger this vulnerability.