Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server
Successful exploitation of these vulnerabilities could allow unauthorized access to video feeds with the potential to modify settings, replace firmware, and/or execute code.
beschreibt (3)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2018-17919US | medium6.5OT erhöht | — | ||
All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server may allow an attacker to use an undocumented user account "default" with its default password to login… | ||||
| CVE-2018-17917US | medium5.3 | — | ||
All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server may allow an attacker to use MAC addresses to enumerate potential Cloud IDs. Using this ID, the attacke… | ||||
| CVE-2018-17915US | critical9.8OT erhöht | — | ||
All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server do not encrypt all device communication. This includes the XMeye service and firmware update communicat… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-18-282-06 JSONself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (3)
- MitigationXMeye P2P Cloud Server
Hangzhou Xiongmai Technology Co., Ltd has not provided mitigations for these vulnerabilities.
- MitigationXMeye P2P Cloud Server
Hangzhou Xiongmai Technology Co., Ltd has not provided mitigations for these vulnerabilities.
- MitigationXMeye P2P Cloud Server
Hangzhou Xiongmai Technology Co., Ltd has not provided mitigations for these vulnerabilities.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan