Authentication Bypass Vulnerability in Circle with Disney API Daemon
CVE-2017-2914

9CRITICAL

Key Information:

Vendor

Circle Media

Status
Circle
Vendor
CVE Published:
7 November 2017

What is CVE-2017-2914?

An authentication bypass vulnerability exists within the API daemon of Circle with Disney running firmware version 2.0.1. By employing a specially crafted token, attackers can circumvent the authentication process of the Apid binary, potentially granting them unauthorized administrative access. Exploitation of this vulnerability requires network connectivity to the affected device, emphasizing the importance of securing network access.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Circle firmware 2.0.1

References

https://www.talosintelligence.com/vulnerability_reports/T...
x_refsource_MISC

CVSS V3.1

Score:
9
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.