LiveActive security incident?Get immediate response
CVE Record

CVE-2017-12095: An exploitable vulnerability exists in the WiFi Access Point feature of Circle with Disney running firmware...

An exploitable vulnerability exists in the WiFi Access Point feature of Circle with Disney running firmware 2.0.1. A series of WiFi packets can force Circle to setup an Access Point with default credentials. An attacker needs to send a series of spoofed "de-auth" packets to trigger this vulnerability.

MediumCVSS 6.5Not KEV-listedUpdated
Discuss exposureBack to CVEs
Glexia's TakeAutomated analysismoderate

Security readout for executives and security teams

Plain-English summary

Circle with Disney firmware 2.0.1 can be forced into setting up a WiFi access point with default credentials. The issue requires local wireless proximity, not internet exposure. The rated impact is service availability, but default credentials create an operational concern for households or sites still using this device.

Executive priority

Treat this as a moderate legacy-device risk. It is not presented as internet-scale or actively exploited, but affected devices should be found and updated, isolated, or retired because remediation options may be limited for older consumer hardware.

Technical view

The WiFi Access Point feature mishandles a sequence of spoofed de-authentication traffic, allowing an adjacent unauthenticated attacker to trigger AP setup with default credentials. CVSS 3.0 is 6.5 with adjacent attack vector, low complexity, no privileges, no user interaction, and high availability impact.

Likely exposure

Exposure is limited to Circle with Disney devices running firmware 2.0.1 and reachable over local WiFi range. Internet-facing scanners are unlikely to identify this directly. Risk is highest where legacy devices remain powered, trusted on home or small-office networks, and unmonitored.

Exploitation context

The source bundle does not show CISA KEV listing or confirmed active exploitation. Exploitation requires wireless proximity and crafted WiFi traffic. Public reporting from Talos describes exploitability, but available sources do not provide evidence of widespread attacks.

Researcher notes

The advisory names a specific firmware version and adjacent wireless attack path. Available sources do not list CWEs, confirmed exploit campaigns, or a named fixed version. Avoid assuming confidentiality or integrity impact beyond the published CVSS vector unless vendor or Talos details support it.

Mitigation direction

  • Identify Circle with Disney devices and confirm firmware version.
  • Check Circle Media or vendor guidance for supported firmware updates.
  • Retire or replace devices that cannot be updated safely.
  • Segment the device away from sensitive systems where continued use is unavoidable.
  • Monitor for unexpected Circle access point behavior or configuration resets.

Validation and detection

  • Inventory wireless and DHCP clients for Circle with Disney devices.
  • Verify whether any device reports firmware 2.0.1.
  • Review wireless monitoring for unexpected access point creation by the device.
  • Confirm compensating controls isolate the device from sensitive networks.
  • Document vendor guidance status and remediation decision.
Prepared
Confidence
medium
Sources
3

Public sources used

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.

Potential ATT&CK relevance

Conservative CVE-to-ATT&CK context

These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.

ATT&CK lookup starting points

Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.

cve · low confidence lookup

CVE-2017-12095 mapping review

Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.

Open ATT&CK lookup
Vulnerability profileCVE Program record
Severity
Medium
CVSS
6.5 (3.0)
Known Exploited
No
Published

Vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Official CVE source material

CNA and ADP enrichment extracted from CVE v5

These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.

1CVSS vectors
0Timeline events
0ADP providers
2Source links

CVSS vector scores

1 official score

We collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.

ScoreVersionSeverityVectorExploitImpactSource
6.5CVSS 3.0MediumCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H2.83.6Primary CVE score

Vulnerability scoring details

Base CVSS 3.0 score

6.5Medium
CVSS 3.0 vector shape for CVE-2017-12095Attack VectorAttack ComplexityPrivileges RequiredUser InteractionScopeConfidentiality ImpactIntegrity ImpactAvailability Impact

Vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector
NetworkAdjacentLocalPhysical
Attack Complexity
LowHigh
Privileges Required
NoneLowHigh
User Interaction
NoneRequired
Scope
ChangedUnchanged
Confidentiality Impact
HighLowNone
Integrity Impact
HighLowNone
Availability Impact
HighLowNone

Source materials

Affected products

Products and packages named in the record

VendorProductVersion / packageStatus
Circle MediaCircleCircle with Disney 2.0.1Listed
Weakness

CWE details

No CWE listed

CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.