high8.8
CVE-2017-2866
An exploitable vulnerability exists in the /api/CONFIG/backup functionality of Circle with Disney.
Impact
An exploitable vulnerability exists in the /api/CONFIG/backup functionality of Circle with Disney. Specially crafted network packets can cause an OS command injection. An attacker can send an HTTP request to trigger this vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Meetcircle | Circle With Disney Firmware | Version 2.0.1 |