Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

23 records

Vendor: Circle Media Clear all filters
TI-2017-08888 CVE-2017-12095 · GHSA-v38j-rw68-vm56

Authentication bypass by spoofing in Circle

Priority LOW 30

An exploitable vulnerability exists in the WiFi Access Point feature of Circle with Disney running firmware 2.0.1.

CVSS 3.0MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00632 Published 2018-04-05 No fix listed CWE-290
TI-2017-08889 CVE-2017-12096 · GHSA-3qqr-w7gm-52gv

Authentication bypass by spoofing in Circle

Priority LOW 30

An exploitable vulnerability exists in the WiFi management of Circle with Disney.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00679 Published 2017-11-07 No fix listed CWE-290
TI-2017-08887 CVE-2017-12094 · GHSA-7rwf-9fg2-2mpj

Command injection in Circle

Priority LOW 34

An exploitable vulnerability exists in the WiFi Channel parsing of Circle with Disney running firmware 2.0.1.

CVSS 3.0HIGH 7.4 Adjacent network No auth No interaction EPSS 0.00873 Published 2017-11-07 No fix listed CWE-77
TI-2017-08878 CVE-2017-12084 · GHSA-h4px-6397-h93g

Missing authorization in Circle

Priority LOW 37

A backdoor vulnerability exists in remote control functionality of Circle with Disney running firmware 2.0.1.

CVSS 3.0HIGH 8.0 Network High privileges No interaction EPSS 0.00973 Published 2017-11-07 No fix listed CWE-862
TI-2017-08877 CVE-2017-12083 · GHSA-mc2h-qwcm-2rr8

Information disclosure in Circle

Priority LOW 28

An exploitable information disclosure vulnerability exists in the apid daemon of the Circle with Disney running firmware 2.0.1.

CVSS 3.0MEDIUM 5.8 Network No auth No interaction EPSS 0.01144 Published 2017-11-07 No fix listed CWE-200
TI-2017-02137 CVE-2017-2917 · GHSA-fp4q-4rpr-rprc

OS command injection in Circle

Priority MEDIUM 44

An exploitable vulnerability exists in the notifications functionality of Circle with Disney running firmware 2.0.1.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03245 Published 2017-11-07 No fix listed CWE-78
TI-2017-02136 CVE-2017-2916 · GHSA-4pgp-x4g6-96cg

Link following in Circle

Priority MEDIUM 42

An exploitable vulnerability exists in the /api/CONFIG/restore functionality of Circle with Disney running firmware 2.0.1.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02251 Published 2017-11-07 No fix listed CWE-59
TI-2017-02134 CVE-2017-2914 · GHSA-57jx-4gq2-cc9x

Improper authentication in Circle

Priority LOW 38

An exploitable authentication bypass vulnerability exists in the API daemon of Circle with Disney running firmware 2.0.1.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01555 Published 2017-11-07 No fix listed CWE-287
TI-2017-02133 CVE-2017-2913 · GHSA-9gq9-g9hm-vm5f

Improper certificate validation in Circle

Priority LOW 28

An exploitable vulnerability exists in the filtering functionality of Circle with Disney.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00673 Published 2017-11-07 No fix listed CWE-295
TI-2017-02118 CVE-2017-2898 · GHSA-mhxp-xvr8-vwjm

Race condition in Circle

Priority LOW 36

An exploitable vulnerability exists in the signature verification of the firmware update functionality of Circle with Disney.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.01556 Published 2017-11-07 No fix listed CWE-362
TI-2017-02110 CVE-2017-2890 · GHSA-36r9-r78p-jqg9

OS command injection in Circle

Priority MEDIUM 43

An exploitable vulnerability exists in the /api/CONFIG/restore functionality of Circle with Disney running firmware 2.0.1.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02631 Published 2017-11-07 No fix listed CWE-78
TI-2017-02109 CVE-2017-2889 · GHSA-7mgw-wjg9-2h5f

Uncontrolled resource consumption in Circle

Priority LOW 36

An exploitable Denial of Service vulnerability exists in the API daemon of Circle with Disney running firmware 2.0.1.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01482 Published 2017-11-07 No fix listed CWE-400
TI-2017-02104 CVE-2017-2884 · GHSA-hv4v-fprg-g23q

Uncontrolled resource consumption in Circle

Priority LOW 36

An exploitable vulnerability exists in the user photo update functionality of Circle with Disney running firmware 2.0.1.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01379 Published 2017-11-07 No fix listed CWE-400
TI-2017-02086 CVE-2017-2866 · GHSA-396h-cmxr-rg77

OS command injection in Circle

Priority MEDIUM 44

An exploitable vulnerability exists in the /api/CONFIG/backup functionality of Circle with Disney.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0308 Published 2017-11-07 No fix listed CWE-78
TI-2017-02084 CVE-2017-2864 · GHSA-3j7m-xwm3-4wc7

Improper authentication in Circle

Priority MEDIUM 45

An exploitable vulnerability exists in the generation of authentication token functionality of Circle with Disney.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01516 Published 2017-11-07 No fix listed CWE-287