Xmeye P2p Cloud Server

xmeye_p2p_cloud_server

Vendor: Xiongmaitech • 3 CVEs

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2018-17919 1Xiongmaitech 1Xmeye P2p Cloud Server Nov 21, 2024 Oct 10, 2018 N/A· v4 6.5 MEDIUM· v3 6.4 MEDIUM· v2 All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server may allow an attacker to use an undocumented user account "default" with its default password to login to XMeye and access/view video streams.
CVE-2018-17917 1Xiongmaitech 1Xmeye P2p Cloud Server Nov 21, 2024 Oct 10, 2018 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server may allow an attacker to use MAC addresses to enumerate potential Cloud IDs. Using this ID, the attacker can discover and connect to valid devi...Show more All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server may allow an attacker to use MAC addresses to enumerate potential Cloud IDs. Using this ID, the attacker can discover and connect to valid devices using one of the supported apps.Show less
CVE-2018-17915 1Xiongmaitech 1Xmeye P2p Cloud Server Nov 21, 2024 Oct 10, 2018 N/A· v4 9.8 CRITICAL· v3 6.4 MEDIUM· v2 All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server do not encrypt all device communication. This includes the XMeye service and firmware update communication. This could allow an attacker to eav...Show more All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server do not encrypt all device communication. This includes the XMeye service and firmware update communication. This could allow an attacker to eavesdrop on video feeds, steal XMeye login credentials, or impersonate the update server with malicious update code.Show less