High ICSA-18-282-06 3 CVEs

Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server

Published Oct 9, 2018 · Updated Oct 9, 2018

Vendor: Hangzhou Xiongmai Technology Product: XMeye P2P Cloud Server

Summary

Successful exploitation of these vulnerabilities could allow unauthorized access to video feeds with the potential to modify settings, replace firmware, and/or execute code.

Vulnerabilities 3

Unscored —

CVE-2018-17915

All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server do not encrypt all device communication. T…

Hangzhou Xiongmai Technology XMeye P2P Cloud Server

Oct 10, 2018
Unscored —

CVE-2018-17917

All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server may allow an attacker to use MAC addresses…

Hangzhou Xiongmai Technology XMeye P2P Cloud Server

Oct 10, 2018
Unscored —

CVE-2018-17919

All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server may allow an attacker to use an undocument…

Hangzhou Xiongmai Technology XMeye P2P Cloud Server

Oct 10, 2018

Revision history

2018-10-09 #1
ICSA-18-282-06 Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server

References

ICS Advisory ICSA-18-282-06 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-18-282-06
Recommended Practices
https://www.cisa.gov/news-events/ics-advisories/icsa-18-282-06
Recommended Practices
https://www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B