MEDIUM🇵🇱 Wersja polska

CVE-2018-17919

CVSS 6.5v3.0pub. 2018-10-10upd. 2024-11-21

All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server may allow an attacker to use an undocumented user account "default" with its default password to login to XMeye and access/view video streams.

CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

  • Xiongmaitech Xmeye P2p Cloud Server

    APP
    Xiongmaitech
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2018-17915CRITICAL9.8PL ✓same product

Brak szyfrowania komunikacji w Xiongmai XMeye P2P Cloud Server

CVE-2018-17917MEDIUM5.3same product

All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server may allow an attacker to use MAC ...

CVE-2025-65856CRITICAL9.8PL ✓same vendor

Authentication bypass w kamerach IP Xiongmai XM530 — dostęp bez uwierzytelnienia

CVE-2022-45460CRITICAL9.8PL ✓same vendor

Stack-based buffer overflow w urządzeniach NVR Xiongmai — RCE bez uwierzytelnienia

CVE-2021-41506CRITICAL9.8PL ✓same vendor

Backdoor w firmware urządzeń Xiongmai — statyczne dane konta root