← Back

CVE-2017-2914

nvd nist
Published: Nov 7, 2017Modified: May 13, 2026

JSON object

Loading...
8.1
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.2 / Impact: 5.9
Source: NVD

Description

An exploitable authentication bypass vulnerability exists in the API daemon of Circle with Disney running firmware 2.0.1. A specially crafted token can bypass the authentication routine of the Apid binary, causing the device to grant unintended administrative access. An attacker needs network connectivity to the device to trigger this vulnerability.

Affected (1)

Meetcircle
1 product
Circle With Disney Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Circle With Disney Firmware
Version 2.0.1
Running on/withPlatform Versions
Meetcircle
Circle With Disney
All versions

Related CWEs

CWE-287
Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (2)

Source: talos-cna@cisco.com
ExploitTechnical DescriptionThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitTechnical DescriptionThird Party Advisory

Timeline

No history available yet.