CVE-2017-2889

HIGH

Circle with Disney Firmware 2.0.1 - Denial of Service via TCP Connection Flood

Title source: llm
STIX 2.1

Description

An exploitable Denial of Service vulnerability exists in the API daemon of Circle with Disney running firmware 2.0.1. A large amount of simultaneous TCP connections causes the APID daemon to repeatedly fork, causing the daemon to run out of memory and trigger a device reboot. An attacker needs network connectivity to the device to trigger this vulnerability.

References (1)

Core 1
Core References
Exploit, Technical Description, Third Party Advisory x_refsource_misc
https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0396

Scores

CVSS v3 7.5
EPSS 0.0148
EPSS Percentile 70.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-400
Status published
Products (2)
Circle Media/Circle firmware 2.0.1
meetcircle/circle_with_disney_firmware 2.0.1
Published Nov 07, 2017
Tracked Since Feb 18, 2026