Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-11940 State: PUBLISHED Published: 2017-12-08T14:00:00Z Last Updated: 2024-09-17T00:55:55.034Z Vendors: Microsoft Corporation Products: Microsoft Malware Protection Engine Problem Types: Remote Code Execution Description: The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Windows 7 SP1, Windows 8.1, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, 1709 and Windows Server 2016, Windows Server, version 1709, Microsoft Exchange Server 2013 and 2016, does not properly scan a specially crafted file leading to remote code execution. aka "Microsoft Malware Protection Engine Remote Code Execution Vulnerability". This is different th
mote code execution. aka "Microsoft Malware Protection Engine Remote Code Execution Vulnerability". This is different than CVE-2017-11937. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11940 - http://www.securitytracker.com/id/1039972 - http://www.securityfocus.com/bid/102104
CVE ID: CVE-2017-12061 State: PUBLISHED Published: 2017-08-01T15:00:00 Last Updated: 2024-08-05T18:28:15.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XSS issue was discovered in admin/install.php in MantisBT before 1.3.12 and 2.x before 2.5.2. Some variables under user control in the MantisBT installation script are not properly sanitized before being output, allowing remote attackers to inject arbitrary JavaScript code, as demonstrated by the $f_database, $f_db_username, and $f_admin_username variables. This is mitigated by the fact that the admin/ folder should be deleted after installation, and also prevented by CSP. Additional Analyst Notes: - CVE Program Container:
lder should be deleted after installation, and also prevented by CSP. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2017/08/01/1 - https://mantisbt.org/bugs/view.php?id=23146 - http://www.securitytracker.com/id/1039030 - https://github.com/mantisbt/mantisbt/commit/17f9b94f031ba93ae2a727bca0e68458ecd08fb0 - http://openwall.com/lists/oss-security/2017/08/01/2 - https://github.com/mantisbt/mantisbt/commit/c73ae3d3d4dd4681489a9e697e8ade785e27cba5
CVE ID: CVE-2017-12062 State: PUBLISHED Published: 2017-08-01T15:00:00 Last Updated: 2024-08-05T18:28:15.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XSS issue was discovered in manage_user_page.php in MantisBT 2.x before 2.5.2. The 'filter' field is not sanitized before being rendered in the Manage User page, allowing remote attackers to execute arbitrary JavaScript code if CSP is disabled. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2017/08/01/1 - http://www.securitytracker.com/id/1039030 - https://mantisbt.org/bugs/view.php?id=23166 - http://openwall.com/lists/oss-security/2017/08/01/2 - https://github.com/m
https://mantisbt.org/bugs/view.php?id=23166 - http://openwall.com/lists/oss-security/2017/08/01/2 - https://github.com/mantisbt/mantisbt/commit/9b5b71dadbeeeec27efea59f562ac5bd6d2673b7
CVE ID: CVE-2017-12064 State: PUBLISHED Published: 2017-08-01T05:00:00 Last Updated: 2024-08-05T18:28:15.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: The csv_log_html function in library/edihistory/edih_csv_inc.php in OpenEMR 5.0.0 and prior allows attackers to bypass intended access restrictions via a crafted name. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/openemr/openemr/commit/b8963a5ca483211ed8de71f18227a0e66a2582ad
CVE ID: CVE-2017-12065 State: PUBLISHED Published: 2017-08-01T05:00:00 Last Updated: 2024-08-05T18:28:15.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: spikekill.php in Cacti before 1.1.16 might allow remote attackers to execute arbitrary code via the avgnan, outlier-start, or outlier-end parameter. Additional Analyst Notes: - CVE Program Container: References: - https://cacti.net/release_notes.php?version=1.1.16 - http://www.securityfocus.com/bid/100080 - https://github.com/Cacti/cacti/commit/bd0e586f6f46d814930226f1516a194e7e72293e - https://github.com/Cacti/cacti/issues/877 - https://security.gentoo.org/glsa/201711-10
CVE ID: CVE-2017-12066 State: PUBLISHED Published: 2017-08-01T05:00:00 Last Updated: 2024-08-05T18:28:15.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in aggregate_graphs.php in Cacti before 1.1.16 allows remote authenticated users to inject arbitrary web script or HTML via specially crafted HTTP Referer headers, related to the $cancel_url variable. NOTE: this vulnerability exists because of an incomplete fix (lack of the htmlspecialchars ENT_QUOTES flag) for CVE-2017-11163. Additional Analyst Notes: - CVE Program Container: References: - https://cacti.net/release_notes.php?version=1.1.16 - https://github.com/Cacti/cacti/commit/bd0e5
ontainer: References: - https://cacti.net/release_notes.php?version=1.1.16 - https://github.com/Cacti/cacti/commit/bd0e586f6f46d814930226f1516a194e7e72293e - https://github.com/Cacti/cacti/issues/877
CVE ID: CVE-2017-12067 State: PUBLISHED Published: 2017-08-01T05:00:00 Last Updated: 2024-08-05T18:28:15.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: Potrace 1.14 has a heap-based buffer over-read in the interpolate_cubic function in mkbitmap.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/hackerlib/hackerlib-vul/tree/master/potrace/heap-buffer-overflow-mkbitmap
CVE ID: CVE-2017-12068 State: PUBLISHED Published: 2017-08-01T05:00:00 Last Updated: 2024-08-05T18:28:16.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Event List plugin 0.7.9 for WordPress has XSS in the slug array parameter to wp-admin/admin.php in an el_admin_categories delete_bulk action. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kevins1022/cve/blob/master/wordpress-event-list.md
CVE ID: CVE-2017-12069 State: PUBLISHED Published: 2017-08-30T19:00:00 Last Updated: 2024-08-05T18:28:15.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XXE vulnerability has been identified in OPC Foundation UA .NET Sample Code before 2017-03-21 and Local Discovery Server (LDS) before 1.03.367. Among the affected products are Siemens SIMATIC PCS7 (All versions V8.1 and earlier), SIMATIC WinCC (All versions < V7.4 SP1), SIMATIC WinCC Runtime Professional (All versions < V14 SP1), SIMATIC NET PC Software, and SIMATIC IT Production Suite. By sending specially crafted packets to the OPC Discovery Server at port 4840/tcp, an attacker might cause the system to access various re
ly crafted packets to the OPC Discovery Server at port 4840/tcp, an attacker might cause the system to access various resources chosen by the attacker. Additional Analyst Notes: - CVE Program Container: References: - https://opcfoundation-onlineapplications.org/faq/SecurityBulletins/OPC_Foundation_Security_Bulletin_CVE-2017-12069.pdf - http://www.securitytracker.com/id/1039510 - https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-535640.pdf - http://www.securityfocus.com/bid/100559
CVE ID: CVE-2017-12070 State: PUBLISHED Published: 2018-06-14T20:00:00 Last Updated: 2024-08-05T18:28:15.778Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unsigned versions of the DLLs distributed by the OPC Foundation may be replaced with malicious code. Additional Analyst Notes: - CVE Program Container: References: - https://opcfoundation-onlineapplications.org/faq/SecurityBulletins/OPC_Foundation_Security_Bulletin_CVE-2017-12070.pdf
CVE ID: CVE-2017-12071 State: PUBLISHED Published: 2017-09-08T14:00:00Z Last Updated: 2024-09-17T02:15:37.814Z Vendors: Synology Products: Synology Photo Station Problem Types: CWE-918 Description: Server-side request forgery (SSRF) vulnerability in file_upload.php in Synology Photo Station before 6.7.4-3433 and 6.3-2968 allows remote authenticated users to download arbitrary local files via the url parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/en-global/support/security/Synology_SA_17_35_PhotoStation
CVE ID: CVE-2017-12072 State: PUBLISHED Published: 2017-12-20T18:00:00Z Last Updated: 2024-09-17T01:36:39.715Z Vendors: Synology Products: Photo Station Problem Types: CWE-79 Description: Cross-site scripting (XSS) vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.8.0-3456 allows remote authenticated users to inject arbitrary web scripts or HTML via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/en-global/support/security/Synology_SA_17_80
CVE ID: CVE-2017-12073 State: REJECTED Published: N/A Last Updated: 2022-12-30T00:00:00 Description: No description available.
CVE ID: CVE-2017-12074 State: PUBLISHED Published: 2017-08-24T18:00:00Z Last Updated: 2024-09-16T17:14:47.030Z Vendors: Synology Products: Synology DNS Server Problem Types: CWE-22 Description: Directory traversal vulnerability in the SYNO.DNSServer.Zone.MasterZoneConf in Synology DNS Server before 2.2.1-3042 allows remote authenticated attackers to write arbitrary files via the domain_name parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/en-global/support/security/Synology_SA_17_46_DNS_Server
CVE ID: CVE-2017-12075 State: PUBLISHED Published: 2018-06-08T13:00:00Z Last Updated: 2024-09-16T23:32:08.956Z Severity: HIGH (CVSS 7.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Synology Products: DiskStation Manager (DSM) Problem Types: CWE-77 Description: Command injection vulnerability in EZ-Internet in Synology DiskStation Manager (DSM) before 6.2-23739 allows remote authenticated users to execute arbitrary command via the username parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/en-global/support/security/Synology_SA_18_24
CVE ID: CVE-2017-12076 State: PUBLISHED Published: 2017-08-28T19:00:00Z Last Updated: 2024-09-17T02:21:43.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: Uncontrolled Resource Consumption vulnerability in SYNO.Core.PortForwarding.Rules in Synology DiskStation (DSM) before 6.1.1-15088 allows remote authenticated attacker to exhaust the memory resources of the machine, causing a denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/en-global/support/security/Synology_SA_17_48_DSM
CVE ID: CVE-2017-12077 State: PUBLISHED Published: 2017-08-28T19:00:00Z Last Updated: 2024-09-16T20:43:32.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: Uncontrolled Resource Consumption vulnerability in SYNO.Core.PortForwarding.Rules in Synology Router Manager (SRM) before 1.1.4-6509 allows remote authenticated attacker to exhaust the memory resources of the machine, causing a denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/en-global/support/security/Synology_SA_17_49_SRM
CVE ID: CVE-2017-12078 State: PUBLISHED Published: 2018-06-08T13:00:00Z Last Updated: 2024-09-17T02:48:07.951Z Severity: HIGH (CVSS 7.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Synology Products: Synology Router Manager (SRM) Problem Types: CWE-77 Description: Command injection vulnerability in EZ-Internet in Synology Router Manager (SRM) before 1.1.6-6931 allows remote authenticated users to execute arbitrary command via the username parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/en-global/support/security/Synology_SA_17_79
CVE ID: CVE-2017-12079 State: PUBLISHED Published: 2017-12-04T19:00:00Z Last Updated: 2024-09-16T18:19:19.285Z Vendors: Synology Products: Photo Station Problem Types: CWE-552 Description: Files or directories accessible to external parties vulnerability in picasa.php in Synology Photo Station before 6.8.1-3458 and before 6.3-2970 allows remote attackers to obtain arbitrary files via prog_id field. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/en-global/support/security/Synology_SA_17_63_Photo_Station
CVE ID: CVE-2017-12080 State: PUBLISHED Published: 2017-12-04T19:00:00Z Last Updated: 2024-09-16T16:58:09.999Z Vendors: Synology Products: Photo Station Problem Types: CWE-200 Description: An information exposure vulnerability in default HTTP configuration file in Synology Photo Station before 6.8.1-3458 and before 6.3-2970 allows remote attackers to obtain sensitive system information via .htaccess file. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/en-global/support/security/Synology_SA_17_63_Photo_Station
CVE ID: CVE-2017-12081 State: PUBLISHED Published: 2018-04-24T19:00:00Z Last Updated: 2024-09-17T03:37:47.754Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Blender Products: Blender Problem Types: buffer overflow Description: An exploitable integer overflow exists in the upgrade of a legacy Mesh attribute of the Blender open-source 3d creation suite v2.78c. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to open the file or use it as a library in order to trigger this vulnerability. Additional Analyst Notes: -
vince a user to open the file or use it as a library in order to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/08/msg00011.html - https://www.debian.org/security/2018/dsa-4248 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0433
CVE ID: CVE-2017-12082 State: PUBLISHED Published: 2018-04-24T19:00:00Z Last Updated: 2024-09-17T00:06:43.560Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Blender Products: Blender Problem Types: buffer overflow Description: An exploitable integer overflow exists in the 'CustomData' Mesh loading functionality of the Blender open-source 3d creation suite. A .blend file with a specially crafted external data file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to edit an object within a .blend library in their Scene in order to trigger this v
ion. An attacker can convince a user to edit an object within a .blend library in their Scene in order to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/08/msg00011.html - https://www.debian.org/security/2018/dsa-4248 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0434
CVE ID: CVE-2017-12083 State: PUBLISHED Published: 2017-11-07T16:00:00Z Last Updated: 2024-09-17T04:24:01.009Z Severity: MEDIUM (CVSS 5.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N) Vendors: Circle Media Products: Circle Problem Types: authentication bypass Description: An exploitable information disclosure vulnerability exists in the apid daemon of the Circle with Disney running firmware 2.0.1. A specially crafted set of packets can make the Disney Circle dump strings from an internal database into an HTTP response. An attacker needs network connectivity to the Internet to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelli
to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0435
CVE ID: CVE-2017-12084 State: PUBLISHED Published: 2017-11-07T16:00:00Z Last Updated: 2024-09-17T02:46:32.079Z Severity: HIGH (CVSS 8 CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Circle Media Products: Circle Problem Types: SSH server enabling Description: A backdoor vulnerability exists in remote control functionality of Circle with Disney running firmware 2.0.1. A specific set of network packets can remotely start an SSH server on the device, resulting in a persistent backdoor. An attacker can send an API call to enable the SSH server. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0436
CVE ID: CVE-2017-12085 State: PUBLISHED Published: 2017-11-07T16:00:00Z Last Updated: 2024-09-17T02:21:00.614Z Severity: CRITICAL (CVSS 9 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Circle Media Products: Circle Problem Types: routing exploit Description: An exploitable routing vulnerability exists in the Circle with Disney cloud infrastructure. A specially crafted packet can make the Circle cloud route a packet to any arbitrary Circle device. An attacker needs network connectivity to the Internet to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0437
CVE ID: CVE-2017-12086 State: PUBLISHED Published: 2018-04-24T19:00:00Z Last Updated: 2024-09-16T18:59:05.378Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Blender Products: Blender Problem Types: buffer overflow Description: An exploitable integer overflow exists in the 'BKE_mesh_calc_normals_tessface' functionality of the Blender open-source 3d creation suite. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to open a .blend file in order to trigger this vulnerability. Additional Analyst Notes: - CVE Program
n convince a user to open a .blend file in order to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/08/msg00011.html - https://www.debian.org/security/2018/dsa-4248 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0438
CVE ID: CVE-2017-12087 State: PUBLISHED Published: 2018-04-24T19:00:00Z Last Updated: 2024-09-16T20:47:11.062Z Severity: CRITICAL (CVSS 10 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: geekman Products: Tinysvcmdns Problem Types: heap overflow Description: An exploitable heap overflow vulnerability exists in the tinysvcmdns library version 2016-07-18. A specially crafted packet can make the library overwrite an arbitrary amount of data on the heap with attacker controlled values. An attacker needs send a dns packet to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0439
CVE ID: CVE-2017-12088 State: PUBLISHED Published: 2018-04-05T21:00:00Z Last Updated: 2024-09-16T17:54:26.277Z Severity: HIGH (CVSS 8.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: Talos Products: Allen Bradley Problem Types: denial of service Description: An exploitable denial of service vulnerability exists in the Ethernet functionality of the Allen Bradley Micrologix 1400 Series B FRN 21.2 and below. A specially crafted packet can cause a device power cycle resulting in a fault state and deletion of ladder logic. An attacker can send one unauthenticated packet to trigger this vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintellig
to trigger this vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0440
CVE ID: CVE-2017-12089 State: PUBLISHED Published: 2018-04-05T21:00:00Z Last Updated: 2024-09-17T00:56:21.961Z Severity: HIGH (CVSS 8.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: Talos Products: Allen Bradley Problem Types: denial of service Description: An exploitable denial of service vulnerability exists in the program download functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a device fault resulting in halted operations. An attacker can send an unauthenticated packet to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_rep
ty. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0441
CVE ID: CVE-2017-12090 State: PUBLISHED Published: 2018-04-05T21:00:00Z Last Updated: 2024-09-16T22:14:12.132Z Severity: HIGH (CVSS 7.7 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H) Vendors: Talos Products: Allen Bradley Problem Types: denial of service Description: An exploitable denial of service vulnerability exists in the processing of snmp-set commands of the Allen Bradley Micrologix 1400 Series B FRN 21.2 and below. A specially crafted snmp-set request, when sent without associated firmware flashing snmp-set commands, can cause a device power cycle resulting in downtime for the device. An attacker can send one packet to trigger this vulnerability. Additional Analyst Notes: - CVE Progra
me for the device. An attacker can send one packet to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0442
CVE ID: CVE-2017-12091 State: REJECTED Published: 2018-02-27T16:00:00 Last Updated: 2018-02-27T15:57:01 Description: No description available.
CVE ID: CVE-2017-12092 State: PUBLISHED Published: 2018-06-04T20:00:00Z Last Updated: 2024-09-16T19:56:47.572Z Severity: LOW (CVSS 3.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Talos Products: Allen Bradley Problem Types: information exposure Description: An exploitable file write vulnerability exists in the memory module functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a file write resulting in a new program being written to the memory module. An attacker can send an unauthenticated packet to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.
gger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0444
CVE ID: CVE-2017-12093 State: PUBLISHED Published: 2018-04-05T21:00:00Z Last Updated: 2024-09-16T18:45:15.530Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Talos Products: Allen Bradley Problem Types: denial of service Description: An exploitable insufficient resource pool vulnerability exists in the session communication functionality of Allen Bradley Micrologix 1400 Series B Firmware 21.2 and before. A specially crafted stream of packets can cause a flood of the session resource pool resulting in legitimate connections to the PLC being disconnected. An attacker can send unauthenticated packets to trigger this vulnerability. Additional Analyst Notes: - C
disconnected. An attacker can send unauthenticated packets to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0445
CVE ID: CVE-2017-12094 State: PUBLISHED Published: 2017-11-07T16:00:00Z Last Updated: 2024-09-17T00:05:49.392Z Severity: HIGH (CVSS 7.4 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: Circle Media Products: Circle Problem Types: arbitrary code execution Description: An exploitable vulnerability exists in the WiFi Channel parsing of Circle with Disney running firmware 2.0.1. A specially crafted SSID can cause the device to execute arbitrary sed commands. An attacker needs to setup an access point reachable by the device to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0446