PT-2017-15608 · Disney · Circle With Disney

Publicado 2017-11-07 · Atualizado 2022-06-13 · CVE-2017-2911

Positive Technologies (AI Summary)

CVSS v3.1

9.0

Crítica

Vetor base

AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Circle with Disney version 2.0.1

Description A vulnerability exists in the remote control functionality due to issues with SSL certificates for specific domain names, causing the rclient daemon to accept a different certificate than intended. An attacker can host an HTTPS server with this certificate to trigger the issue.

Recommendations For Circle with Disney version 2.0.1, consider restricting access to the remote control functionality until a patch is available. As a temporary workaround, avoid using SSL certificates for specific domain names that may cause the rclient daemon to accept unintended certificates.

Exploit

Correção

Enumeração de Fraquezas

CWE-297

Identificadores relacionados

CVE-2017-2911

Produtos afetados

Circle With Disney

Referências · 4

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2017-0418 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-2911 · Nota de Segurança
• https://t.me/cvenotify/31530 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2017-2911 · Aviso do Fabricante