CVE-2017-12094

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

An exploitable vulnerability exists in the WiFi Channel parsing of Circle with Disney running firmware 2.0.1. A specially crafted SSID can cause the device to execute arbitrary sed commands. An attacker needs to setup an access point reachable by the device to trigger this vulnerability.

Metrics

CVSS 3.0 6.5/10CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-77

Affected software

Vendor	Product	Versions
Circle Media	Circle	firmware 2.0.1

References

https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0446Exploit, Technical Description, Third Party Advisory
https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0446Exploit, Technical Description, Third Party Advisory

Timeline

Published: Nov 7, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-120956.5An exploitable vulnerability exists in the WiFi Access Point feature of Circle with Disney running firmware 2.0.1. A series of WiFi packets CVE-2017-120966.5An exploitable vulnerability exists in the WiFi management of Circle with Disney. A crafted Access Point with the same name as the legitimat CVE-2017-120976.1An exploitable cross site scripting (XSS) vulnerability exists in the filter functionality of the delayed_job_web rails gem version 1.4. A s CVE-2017-120986.1An exploitable cross site scripting (XSS) vulnerability exists in the add filter functionality of the rails_admin rails gem version 1.2.0. A CVE-2017-120997.8An exploitable integer overflow exists in the upgrade of the legacy Mesh attribute 'tface' of the Blender open-source 3d creation suite v2.7 CVE-2017-12107.5IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 and 5.0.2 could allow an unauthenticated attacker to inject data into log files m CVE-2017-121007.8An exploitable integer overflow exists in the 'multires_load_old_dm' functionality of the Blender open-source 3d creation suite v2.78c. A sp CVE-2017-121017.8An exploitable integer overflow exists in the 'modifier_mdef_compact_influences' functionality of the Blender open-source 3d creation suite CVE-2017-121027.8An exploitable integer overflow exists in the way that the Blender open-source 3d creation suite v2.78c converts curves to polygons. A speci CVE-2017-121037.8An exploitable integer overflow exists in the way that the Blender open-source 3d creation suite v2.78c converts text rendered as a font int CVE-2017-121047.8An exploitable integer overflow exists in the way that the Blender open-source 3d creation suite v2.78c draws a Particle object. A specially CVE-2017-121057.8An exploitable integer overflow exists in the way that the Blender open-source 3d creation suite v2.78c applies a particular object modifier