CVE-2017-12094

Name of the Vulnerable Software and Affected Versions Circle with Disney version 2.0.1

Description A vulnerability exists in the WiFi Channel parsing of the device. It can be exploited by a specially crafted SSID, which can cause the device to execute arbitrary sed commands. An attacker needs to set up an access point reachable by the device to trigger this issue.

Recommendations For version 2.0.1, consider restricting access to the device's WiFi capabilities until a patch is available. As a temporary workaround, avoid connecting the device to untrusted or unknown access points to minimize the risk of exploitation.