Beveiligingsadvies

CVE-2017-2912

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2017-11-07 16:00:00
Laatst bijgewerkt 2024-09-16 17:03:25
Toegewezen door talos
CVSS-score 7.4
Status PUBLISHED

Beschrijving

An exploitable vulnerability exists in the remote control functionality of Circle with Disney running firmware 2.0.1. SSL certificates for specific domain names can cause the goclient daemon to accept a different certificate than intended. An attacker can host an HTTPS server with this certificate to trigger this vulnerability.