Vulnerabilities

TI-2018-12751 CVE-2018-17919 · GHSA-x7pj-758f-q7rv

Hard-coded credentials in Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server

LOW 31

All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server may allow an attacker to use an undocumented user account "default" with its default password to login to XMeye and access/view video streams.

CVSS 3.0MEDIUM 6.5 Network No auth No interaction EPSS 0.00987 Published 2018-10-10 No fix listed CWE-912

TI-2018-12749 CVE-2018-17917 · GHSA-hx93-w6p2-8rvj

Information disclosure in Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server

LOW 27

All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server may allow an attacker to use MAC addresses to enumerate potential Cloud IDs.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.01251 Published 2018-10-10 No fix listed CWE-341

TI-2018-12747 CVE-2018-17915 · GHSA-7h63-9wr7-vcw2

All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server do not…

MEDIUM 44

All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server do not encrypt all device communication.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.0107 Published 2018-10-10 No fix listed CWE-311

Vulnerabilities

Filters

Hard-coded credentials in Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server

Information disclosure in Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server

All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server do not…