CVE-2018-17919

All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server may allow an attacker to use an undocumented user account "default" with its default password to login to XMeye and access/view video streams.

• CWE-912
• CWE-798

• https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06Third Party Advisory, US Government Resource
• https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06Third Party Advisory, US Government Resource

Published

Oct 10, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-17913A type confusion vulnerability exists when processing projec…
• CVE-2018-17914InduSoft Web Studio versions prior to 8.1 SP2, and InTouch E…9.8
• CVE-2018-17915All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye …
• CVE-2018-17916InduSoft Web Studio versions prior to 8.1 SP2, and InTouch E…9.8
• CVE-2018-17917All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye …
• CVE-2018-17918Circontrol CirCarLife all versions prior to 4.3.1, authentic…
• CVE-2018-1792IBM WebSphere MQ 8.0.0.0 through 8.0.0.10, 9.0.0.0 through 9…8.8
• CVE-2018-17921SAGA1-L8B with any firmware versions prior to A0.10 are vuln…8.8
• CVE-2018-17922Circontrol CirCarLife all versions prior to 4.3.1, the PAP c…
• CVE-2018-17923SAGA1-L8B with any firmware versions prior to A0.10 are vuln…
• CVE-2018-17924Rockwell Automation MicroLogix 1400 Controllers and 1756 Con…8.6
• CVE-2018-17925Multiple instances of this vulnerability (Unsafe ActiveX Con…