CVE-2018-17917

All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server may allow an attacker to use MAC addresses to enumerate potential Cloud IDs. Using this ID, the attacker can discover and connect to valid devices using one of the supported apps.

• CWE-341
• CWE-200

• https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06Third Party Advisory, US Government Resource
• https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06Third Party Advisory, US Government Resource

Published

Oct 10, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-17911LAquis SCADA Versions 4.1.0.3870 and prior has several stack…7.8
• CVE-2018-17912An XXE vulnerability exists in CASE Suite Versions 3.10 and …
• CVE-2018-17913A type confusion vulnerability exists when processing projec…
• CVE-2018-17914InduSoft Web Studio versions prior to 8.1 SP2, and InTouch E…9.8
• CVE-2018-17915All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye …
• CVE-2018-17916InduSoft Web Studio versions prior to 8.1 SP2, and InTouch E…9.8
• CVE-2018-17918Circontrol CirCarLife all versions prior to 4.3.1, authentic…
• CVE-2018-17919All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye …
• CVE-2018-1792IBM WebSphere MQ 8.0.0.0 through 8.0.0.10, 9.0.0.0 through 9…8.8
• CVE-2018-17921SAGA1-L8B with any firmware versions prior to A0.10 are vuln…8.8
• CVE-2018-17922Circontrol CirCarLife all versions prior to 4.3.1, the PAP c…
• CVE-2018-17923SAGA1-L8B with any firmware versions prior to A0.10 are vuln…