PT-2017-15598
CVE-2017-2890
·
Publicado
2017-11-07
·
Atualizado
2022-06-03
Descrição por
CVSS 3.1
9.9
CríticaMétricasAV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Circle with Disney version 2.0.1
Description
An issue exists in the "/api/CONFIG/restore" functionality, where specially crafted network packets can cause an OS command injection. An attacker can send an HTTP request to trigger this issue.
Recommendations
For Circle with Disney version 2.0.1, consider restricting access to the "/api/CONFIG/restore" endpoint until a patch is available. As a temporary workaround, avoid using the restore functionality via this endpoint to minimize the risk of exploitation.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾