Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server
view advisory published 2018-10-09
Successful exploitation of these vulnerabilities could allow unauthorized access to video feeds with the potential to modify settings, replace firmware, and/or execute code.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-17919US | medium6.5OT elevated | — | ||
All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server may allow an attacker to use an undocumented user account "default" with its default password to login… | ||||
| CVE-2018-17917US | medium5.3 | — | ||
All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server may allow an attacker to use MAC addresses to enumerate potential Cloud IDs. Using this ID, the attacke… | ||||
| CVE-2018-17915US | critical9.8OT elevated | — | ||
All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server do not encrypt all device communication. This includes the XMeye service and firmware update communicat… | ||||
02
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-18-282-06 JSONself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (3)
- MitigationXMeye P2P Cloud Server
Hangzhou Xiongmai Technology Co., Ltd has not provided mitigations for these vulnerabilities.
- MitigationXMeye P2P Cloud Server
Hangzhou Xiongmai Technology Co., Ltd has not provided mitigations for these vulnerabilities.
- MitigationXMeye P2P Cloud Server
Hangzhou Xiongmai Technology Co., Ltd has not provided mitigations for these vulnerabilities.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan