Loading HuntDB...

GHSA-7rwf-9fg2-2mpj

GitHub Security Advisory

⚠ Unreviewed MODERATE Has CVE

Advisory Details

An exploitable vulnerability exists in the WiFi Channel parsing of Circle with Disney running firmware 2.0.1. A specially crafted SSID can cause the device to execute arbitrary sed commands. An attacker needs to setup an access point reachable by the device to trigger this vulnerability.

Related CVEs

Key Information

GHSA ID
GHSA-7rwf-9fg2-2mpj
Published
May 13, 2022 1:01 AM
Last Modified
May 13, 2022 1:01 AM
CVSS Score
5.0 /10
Primary Ecosystem
Unknown
Primary Package
Unknown
GitHub Reviewed
✗ No

Dataset

Last updated: July 12, 2025 6:29 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.