High severity8.8NVD Advisory· Published Nov 7, 2017· Updated Jun 17, 2026

CVE-2017-2866

Description

An exploitable vulnerability exists in the /api/CONFIG/backup functionality of Circle with Disney. Specially crafted network packets can cause an OS command injection. An attacker can send an HTTP request to trigger this vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Meetcircle/Circle With Disney Firmware
cpe:2.3:o:meetcircle:circle_with_disney_firmware:2.0.1:*:*:*:*:*:*:*
Circle Media/Circlev5
Range: firmware 2.0.1

Patches

Vulnerability mechanics

References

www.talosintelligence.com/vulnerability_reports/TALOS-2017-0372nvdExploitTechnical DescriptionThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000