PT-2017-15609 · Disney · Circle With Disney

Publicado 2017-11-07 · Atualizado 2022-06-13 · CVE-2017-2912

Positive Technologies (AI Summary)

CVSS v3.1

7.4

Alta

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Circle with Disney version 2.0.1

Description A vulnerability exists in the remote control functionality due to issues with SSL certificates for specific domain names, causing the goclient daemon to accept a different certificate than intended. An attacker can exploit this by hosting an HTTPS server with the certificate.

Recommendations For Circle with Disney version 2.0.1, consider disabling the remote control functionality until a patch is available to prevent exploitation. Restrict access to the goclient daemon to minimize the risk of accepting unauthorized certificates.

Exploit

Correção

Enumeração de Fraquezas

CWE-297

Identificadores relacionados

CVE-2017-2912

Produtos afetados

Circle With Disney

Referências · 4

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2017-0419 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-2912 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-2912 · Aviso do Fabricante
• https://t.me/cvenotify/31528 · Publicação no Telegram