CVE-2017-12094
Last modified
CVE-2017-12094 is a high-severity vulnerability rated 7.4/10 on the CVSS scale. An exploitable vulnerability exists in the WiFi Channel parsing of Circle with Disney running firmware 2.0.1. A specially crafted SSID can cause the device to execute arbitrary sed commands. EPSS estimates a 0.87% chance of exploitation in the next 30 days.
Description
An exploitable vulnerability exists in the WiFi Channel parsing of Circle with Disney running firmware 2.0.1. A specially crafted SSID can cause the device to execute arbitrary sed commands. An attacker needs to setup an access point reachable by the device to trigger this vulnerability.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Meetcircle | Circle With Disney Firmware | 2.0.1 |
References
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0446Exploit, Technical Description, Third Party Advisory
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0446Exploit, Technical Description, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2017-12094?
How severe is CVE-2017-12094?
How do I fix CVE-2017-12094?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2017
- CVE-2017-12089An exploitable denial of service vulnerability exists in the…8.6
- CVE-2017-1209IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 a…
- CVE-2017-12090An exploitable denial of service vulnerability exists in the…7.7
- CVE-2017-12091Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
- CVE-2017-12092An exploitable file write vulnerability exists in the memory…3.7
- CVE-2017-12093An exploitable insufficient resource pool vulnerability exis…5.3
- CVE-2017-12095An exploitable vulnerability exists in the WiFi Access Point…6.5
- CVE-2017-12096An exploitable vulnerability exists in the WiFi management o…6.5
- CVE-2017-12097An exploitable cross site scripting (XSS) vulnerability exis…6.1
- CVE-2017-12098An exploitable cross site scripting (XSS) vulnerability exis…6.1
- CVE-2017-12099An exploitable integer overflow exists in the upgrade of the…7.8
- CVE-2017-1210IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 a…
Are you affected by CVE-2017-12094?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST