CVE-2017-12085

State
Published
Severity
9.0 Critical
Published
Nov 7, 2017
Updated
Sep 17, 2024
Reserved
Jul 31, 2017

Read the record on cve.org

Description

An exploitable routing vulnerability exists in the Circle with Disney cloud infrastructure. A specially crafted packet can make the Circle cloud route a packet to any arbitrary Circle device. An attacker needs network connectivity to the Internet to trigger this vulnerability.

Scores

CVSSScoreVectorSource
3.09.0 CriticalCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:Htalos

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
CircleCircle Media
  • firmware 2.0.1Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.