CVEvulnerability

CVE-2018-17915

9.8 CRITICAL Published 2018-10-10 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-10-10
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:P/A:N
Weaknesses
CWE-311

Description

All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server do not encrypt all device communication. This includes the XMeye service and firmware update communication. This could allow an attacker to eavesdrop on video feeds, steal XMeye login credentials, or impersonate the update server with malicious update code.

Affected configurations

• xiongmaitech xmeye p2p cloud server

Related

Weakness · CWE (1)

  • CWE-311 Missing Encryption of Sensitive Data weakness

References