CVE-2018-17917: Infoleak

Published Oct 10, 2018

Updated

All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server may allow an attacker to use MAC addresses to enumerate potential Cloud IDs. Using this ID, the attacker can discover and connect to valid devices using one of the supported apps.

Affected Software

1 affected component

Xiongmaitech Xmeye P2p Cloud Server

Event History

Oct 10, 2018

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the vulnerability ID of this vulnerability?

The vulnerability ID of this vulnerability is CVE-2018-17917.

What is the severity of CVE-2018-17917?

CVE-2018-17917 has a severity value of 5.3, which is considered medium.

What is affected by CVE-2018-17917?

All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server are affected by CVE-2018-17917.

How can an attacker exploit CVE-2018-17917?

An attacker can exploit CVE-2018-17917 by using MAC addresses to enumerate potential Cloud IDs and connect to valid devices using supported apps.

Is there a fix for CVE-2018-17917?

At this time, there is no known fix for CVE-2018-17917. It is recommended to follow any mitigation steps provided by the vendor or consider alternative solutions.