What’s Vulnerable › Vulnerabilities

CVE-2017-2865

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-11-07 · updated 2026-06-17

Description

An exploitable vulnerability exists in the firmware update functionality of Circle with Disney. Specially crafted network packets can cause the product to run an attacker-supplied shell script. An attacker can intercept and alter network traffic to trigger this vulnerability.

Affected products

• Circle Media Circle: 2.0.1

References

• https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0371
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0371

Get alerted when CVE-2017-2865 or the next vulnerability affects your stack