QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2018-17915

Back to search

CVE-2018-17915

Published: Oct 10, 2018

Modified: Sep 16, 2024

PUBLISHED

Description

All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server do not encrypt all device communication. This includes the XMeye service and firmware update communication. This could allow an attacker to eavesdrop on video feeds, steal XMeye login credentials, or impersonate the update server with malicious update code.

VendorProductVersions

Hangzhou Xiongmai Technology Co., Ltd

XMeye P2P Cloud Server

affected
All versions

Weaknesses (CWE)

CWE-311

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now