CVE-2017-2898: Race Condition

First published: Tue Nov 07 2017(Updated: )

An exploitable vulnerability exists in the signature verification of the firmware update functionality of Circle with Disney. Specially crafted network packets can cause an unsigned firmware to be installed in the device resulting in arbitrary code execution. An attacker can send a series of packets to trigger this vulnerability.

Credit: talos-cna@cisco.com

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• collector/nvd-index
• agent/weakness
• agent/type
• agent/references
• agent/severity
• agent/author
• agent/event
• agent/description
• agent/tags
• agent/softwarecombine
• agent/first-publish-date
• agent/last-modified-date
• collector/mitre-cve
• source/MITRE
• vendor/meetcircle
• canonical/meetcircle circle with disney firmware
• version/meetcircle circle with disney firmware/2.0.1
• canonical/meetcircle circle with disney