VULNERABILITY INTELLIGENCE

CVE-2017-12083

CVSS score5.8 MEDIUM

EPSS probability1.14%

CISA KEVNot currently listed

Published2017-11-07

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N

Description

An exploitable information disclosure vulnerability exists in the apid daemon of the Circle with Disney running firmware 2.0.1. A specially crafted set of packets can make the Disney Circle dump strings from an internal database into an HTTP response. An attacker needs network connectivity to the Internet to trigger this vulnerability.

Weakness classification

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Primary references

talos-cna@cisco.com — Exploit, Technical Description, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Technical Description, Third Party Advisory