Xmeye P2P Cloud Server
Approved changes feed: RSS · Atom
cpe:2.3:a:hangzhou_xiongmai_technology_co.,_ltd:xmeye_p2p_cloud_server:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Hangzhou Xiongmai Technology Co., Ltd (18bbe717-7599-5c6f-80e6-615417bf7d88) |
|---|---|
| Product | Xmeye P2P Cloud Server (42cf9c6d-8ccd-5e0b-82d0-b54f99aca35b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-17919 |
vulnerable | 2026-06-08 05:11:06.916277 |
Details available
All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server may allow an attacker to use an undocumented user account "default" with its default password to login to XMeye and access/view video streams.
Published: 2018-10-10T15:00:00.000Z
Updated: 2024-09-16T18:03:48.747Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-17917 |
vulnerable | 2026-06-08 05:11:06.909360 |
Details available
All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server may allow an attacker to use MAC addresses to enumerate potential Cloud IDs. Using this ID, the attacker can discover and connect to valid devices using one of the supported apps.
Published: 2018-10-10T15:00:00.000Z
Updated: 2024-09-16T17:59:25.518Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-17915 |
vulnerable | 2026-06-08 05:11:06.906402 |
Details available
All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server do not encrypt all device communication. This includes the XMeye service and firmware update communication. This could allow an attacker to eavesdrop on video feeds, steal XMeye login credentials, or impersonate the update server with malicious update code.
Published: 2018-10-10T15:00:00.000Z
Updated: 2024-09-16T22:56:29.656Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.