CVE-2018-17915
Last modified
CVE-2018-17915 is a vulnerability of currently unknown severity. All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server do not encrypt all device communication. This includes the XMeye service and firmware update communication. EPSS estimates a 1.09% chance of exploitation in the next 30 days.
Description
All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server do not encrypt all device communication. This includes the XMeye service and firmware update communication. This could allow an attacker to eavesdrop on video feeds, steal XMeye login credentials, or impersonate the update server with malicious update code.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Xiongmaitech | Xmeye P2p Cloud Server | All versions |
References
- https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06Third Party Advisory, US Government Resource
- https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06Third Party Advisory, US Government Resource
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2018-17915?
How severe is CVE-2018-17915?
How do I fix CVE-2018-17915?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2018
- CVE-2018-1791IBM Connections 5.0, 5.5, and 6.0 is vulnerable to an Extern…4.9
- CVE-2018-17910WebAccess Versions 8.3.2 and prior. The application fails to…
- CVE-2018-17911LAquis SCADA Versions 4.1.0.3870 and prior has several stack…7.8
- CVE-2018-17912An XXE vulnerability exists in CASE Suite Versions 3.10 and …
- CVE-2018-17913A type confusion vulnerability exists when processing projec…
- CVE-2018-17914InduSoft Web Studio versions prior to 8.1 SP2, and InTouch E…9.8
- CVE-2018-17916InduSoft Web Studio versions prior to 8.1 SP2, and InTouch E…9.8
- CVE-2018-17917All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye …
- CVE-2018-17918Circontrol CirCarLife all versions prior to 4.3.1, authentic…
- CVE-2018-17919All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye …
- CVE-2018-1792IBM WebSphere MQ 8.0.0.0 through 8.0.0.10, 9.0.0.0 through 9…8.8
- CVE-2018-17921SAGA1-L8B with any firmware versions prior to A0.10 are vuln…8.8
Are you affected by CVE-2018-17915?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST