QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2018-17917

Back to search

CVE-2018-17917

Published: Oct 10, 2018

Modified: Sep 16, 2024

PUBLISHED

Description

All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server may allow an attacker to use MAC addresses to enumerate potential Cloud IDs. Using this ID, the attacker can discover and connect to valid devices using one of the supported apps.

VendorProductVersions

Hangzhou Xiongmai Technology Co., Ltd

XMeye P2P Cloud Server

affected
All versions

Weaknesses (CWE)

CWE-341

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now