Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.5
CVE-2017-12096: Circle with Disney can be tricked into joining fake Wi‑Fi
CVE-2017-12096 · published 8 years ago
Summary
The Circle with Disney device may automatically connect to a malicious Wi‑Fi network if an attacker sets up a fake hotspot with the same name and interferes with the signal. This could let the device send data over an untrusted connection or be controlled by the attacker. Apply the latest firmware update and avoid using unknown Wi‑Fi networks to protect your system.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| meetcircle | circle_with_disney_firmware |
2.0.1 cpe:2.3:o:meetcircle:circle_with_disney_firmware:2.0.1:*:*:*:*:*:*:* |
Original advisory text
An exploitable vulnerability exists in the WiFi management of Circle with Disney. A crafted Access Point with the same name as the legitimate one can be used to make Circle connect to an untrusted ...
An exploitable vulnerability exists in the WiFi management of Circle with Disney. A crafted Access Point with the same name as the legitimate one can be used to make Circle connect to an untrusted network. An attacker needs to setup an Access Point reachable by the device and to send a series of spoofed "deauth" packets to trigger this vulnerability.
References
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0448 Exploit Technical Description Third Party Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Type
CWE-290Authentication Bypass by Spoofing
Timeline
Published7 Nov 2017
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2017-12096 · NVD
Track software like this
Free during beta