Vulnerabilities (CVE)

Filtered by vendor Meetcircle Subscribe
Total 23 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-2881 1 Meetcircle 2 Circle With Disney, Circle With Disney Firmware 2025-04-20 5.8 MEDIUM 8.8 HIGH
An exploitable vulnerability exists in the torlist update functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets can cause the product to run an attacker-supplied shell script. An attacker can intercept and alter network traffic to trigger this vulnerability.
CVE-2017-2889 1 Meetcircle 2 Circle With Disney, Circle With Disney Firmware 2025-04-20 7.8 HIGH 7.5 HIGH
An exploitable Denial of Service vulnerability exists in the API daemon of Circle with Disney running firmware 2.0.1. A large amount of simultaneous TCP connections causes the APID daemon to repeatedly fork, causing the daemon to run out of memory and trigger a device reboot. An attacker needs network connectivity to the device to trigger this vulnerability.
CVE-2017-12095 1 Meetcircle 1 Circle With Disney Firmware 2024-11-21 3.3 LOW 6.5 MEDIUM
An exploitable vulnerability exists in the WiFi Access Point feature of Circle with Disney running firmware 2.0.1. A series of WiFi packets can force Circle to setup an Access Point with default credentials. An attacker needs to send a series of spoofed "de-auth" packets to trigger this vulnerability.