CVE-2017-2898

An exploitable vulnerability exists in the signature verification of the firmware update functionality of Circle with Disney. Specially crafted network packets can cause an unsigned firmware to be installed in the device resulting in arbitrary code execution. An attacker can send a series of packets to trigger this vulnerability.

• CWE-362

• https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0405Exploit, Technical Description, Third Party Advisory
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0405Exploit, Technical Description, Third Party Advisory

Published

Nov 7, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-2892An exploitable arbitrary memory read vulnerability exists in…9.8
• CVE-2017-2893An exploitable NULL pointer dereference vulnerability exists…7.5
• CVE-2017-2894An exploitable stack buffer overflow vulnerability exists in…9.8
• CVE-2017-2895An exploitable arbitrary memory read vulnerability exists in…8.2
• CVE-2017-2896An exploitable out-of-bounds write vulnerability exists in t…7.8
• CVE-2017-2897An exploitable out-of-bounds write vulnerability exists in t…7.8
• CVE-2017-2899An exploitable integer overflow exists in the TIFF loading f…7.8
• CVE-2017-2900An exploitable integer overflow exists in the PNG loading fu…7.8
• CVE-2017-2901An exploitable integer overflow exists in the IRIS loading f…7.8
• CVE-2017-2902An exploitable integer overflow exists in the DPX loading fu…7.8
• CVE-2017-2903An exploitable integer overflow exists in the DPX loading fu…7.8
• CVE-2017-2904An exploitable integer overflow exists in the RADIANCE loadi…7.8