Security Advisory

CVE-2017-2866

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-11-07 16:00:00
Last updated 2024-09-17 03:22:25
Assigner talos
CVSS score 9.9
State PUBLISHED

Description

An exploitable vulnerability exists in the /api/CONFIG/backup functionality of Circle with Disney. Specially crafted network packets can cause an OS command injection. An attacker can send an HTTP request to trigger this vulnerability.