Xiongmaitech

Xmeye P2p Cloud Server

3 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2018-17915

  • EPSS 0.26%
  • Published 10.10.2018 15:29:00
  • Last modified 21.11.2024 03:55:12

All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server do not encrypt all device communication. This includes the XMeye service and firmware update communication. This could allow an attacker to eavesdrop on video feeds, steal X...

5.3

CVE-2018-17917

  • EPSS 0.17%
  • Published 10.10.2018 15:29:00
  • Last modified 21.11.2024 03:55:12

All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server may allow an attacker to use MAC addresses to enumerate potential Cloud IDs. Using this ID, the attacker can discover and connect to valid devices using one of the supported...

6.5

CVE-2018-17919

  • EPSS 0.13%
  • Published 10.10.2018 15:29:00
  • Last modified 21.11.2024 03:55:12

All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server may allow an attacker to use an undocumented user account "default" with its default password to login to XMeye and access/view video streams.