EUVD-2018-9658

Malware in sbrugna...

Default credentials

All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server may allow an attacker to use an undocumented user account "default" with its default password to login to XMeye and access/view video streams...

Code injection

All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server may allow an attacker to use MAC addresses to enumerate potential Cloud IDs. Using this ID, the attacker can discover and connect to valid devices using one of the supported apps...

CVE-2018-17917

All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server may allow an attacker to use MAC addresses to enumerate potential Cloud IDs. Using this ID, the attacker can discover and connect to valid devices using one of the supported apps...

CVE-2018-17919

All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server may allow an attacker to use an undocumented user account "default" with its default password to login to XMeye and access/view video streams...

CVE-2018-17919

All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server may allow an attacker to use an undocumented user account "default" with its default password to login to XMeye and access/view video streams...

CVE-2018-17917

All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server may allow an attacker to use MAC addresses to enumerate potential Cloud IDs. Using this ID, the attacker can discover and connect to valid devices using one of the supported apps...

PT-2018-14271

Name of the Vulnerable Software and Affected Versions Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server affected versions not specified Description The issue allows an attacker to use an undocumented user account default with its default password to login to XMeye and access or view...

CVE-2018-17917: Predictable from Observable State

All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server may allow an attacker to use MAC addresses to enumerate potential Cloud IDs. Using this ID, the attacker can discover and connect to valid devices using one of the supported apps...

CVE-2018-17919: Hidden Functionality

All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server may allow an attacker to use an undocumented user account "default" with its default password to login to XMeye and access/view video streams...

PT-2018-14267

Name of the Vulnerable Software and Affected Versions Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server affected versions not specified Description The issue concerns the lack of encryption in all device communication, including the XMeye service and firmware update communication. This...

XMeye P2P Cloud Remote Code Execution / Integrity Issues Vulnerabilities

XMeye P2P Cloud used with Xiongmai IP Cameras, NVRs and DVRs suffer from predictable Cloud IDs, default admin password, and various other issues that can result in remote code execution. ======================================================================= title: Remote Code Execution via XMeye...

CVE-2018-17915: Missing Encryption of Sensitive Data

All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server do not encrypt all device communication. This includes the XMeye service and firmware update communication. This could allow an attacker to eavesdrop on video feeds, steal XMeye login credentials, or impersonate the upda...

PT-2018-14269

Name of the Vulnerable Software and Affected Versions Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server affected versions not specified Description The issue allows an attacker to enumerate potential Cloud IDs using MAC addresses. With this ID, the attacker can discover and connect to...