PT-2017-12346 · Disney · Circle With Disney

Published 2017-11-07 · Updated 2022-04-19 · CVE-2017-12085

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Circle with Disney (affected versions not specified)

Description A routing vulnerability exists in the Circle with Disney cloud infrastructure, allowing a specially crafted packet to be routed to any arbitrary Circle device. An attacker needs network connectivity to the Internet to trigger this issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2017-12085

Affected Products

Circle With Disney

References · 3

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2017-0437 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-12085 · Security Note
• https://osv.dev/vulnerability/CVE-2017-12085 · Vendor Advisory