Security Advisory

CVE-2017-2911

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-11-07 16:00:00

Last updated 2024-09-16 20:01:23

Assigner talos

CVSS score 9.0

State PUBLISHED

Description

An exploitable vulnerability exists in the remote control functionality of Circle with Disney running firmware 2.0.1. SSL certificates for specific domain names can cause the rclient daemon to accept a different certificate than intended. An attacker can host an HTTPS server with this certificate to trigger this vulnerability.

← Browse all CVEs View on cve.org ↗