CVE-2017-2912

An exploitable vulnerability exists in the remote control functionality of Circle with Disney running firmware 2.0.1. SSL certificates for specific domain names can cause the goclient daemon to accept a different certificate than intended. An attacker can host an HTTPS server with this certificate to trigger this vulnerability.

An exploitable vulnerability exists in the remote control functionality of Circle with Disney running firmware 2.0.1. SSL certificates for specific domain names can cause the goclient daemon to accept a different certificate than intended. An attacker can host an HTTPS server with this certificate to trigger this vulnerability.

Existe una vulnerabilidad explotable en la funcionalidad de control remoto de Circle with Disney con firmware 2.0.1. Los certificados SSL para nombres de dominio específicos pueden provocar que el demonio goclient acepte un certificado distinto al planeado. Un atacante puede hospedar un servidor HTTPS con este certificado para provocar esta vulnerabilidad.