CVE-2018-17915: Critical severity Xiongmaitech Xmeye P2p Cloud Server vulnerability

Published Oct 10, 2018

Updated

All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server do not encrypt all device communication. This includes the XMeye service and firmware update communication. This could allow an attacker to eavesdrop on video feeds, steal XMeye login credentials, or impersonate the update server with malicious update code.

Affected Software

1 affected component

Xiongmaitech Xmeye P2p Cloud Server

Event History

Oct 10, 2018

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the vulnerability ID of this vulnerability?

The vulnerability ID of this vulnerability is CVE-2018-17915.

What software is affected by the vulnerability?

The Hangzhou Xiongmai Technology Co. Ltd XMeye P2P Cloud Server is affected by the vulnerability.

What is the severity of CVE-2018-17915?

The severity of CVE-2018-17915 is critical.

What is the impact of the vulnerability?

The vulnerability could allow an attacker to eavesdrop on video feeds, steal XMeye login credentials, or impersonate the update communication.

Is there a fix available for CVE-2018-17915?

Please refer to the provided reference link for information on available fixes for CVE-2018-17915.