Vulnerability Details CVE-2017-2911
An exploitable vulnerability exists in the remote control functionality of Circle with Disney running firmware 2.0.1. SSL certificates for specific domain names can cause the rclient daemon to accept a different certificate than intended. An attacker can host an HTTPS server with this certificate to trigger this vulnerability.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 41.8%
CVSS Severity
CVSS v3 Score 9.0
CVSS v2 Score 2.6
References
Products affected by CVE-2017-2911
-
cpe:2.3:h:meetcircle:circle_with_disney:-
-
cpe:2.3:o:meetcircle:circle_with_disney_firmware:2.0.1