CVE-2018-17915 Vulnerability Details

  /     /     /  

CVE-2018-17915 Metadata Quick Info

CVE Published: 10/10/2018 | CVE Updated: 16/09/2024 | CVE Year: 2018
Source: icscert | Vendor: Hangzhou Xiongmai Technology Co., Ltd | Product: XMeye P2P Cloud Server
Status : PUBLISHED

---

CVE-2018-17915 Description

All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server do not encrypt all device communication. This includes the XMeye service and firmware update communication. This could allow an attacker to eavesdrop on video feeds, steal XMeye login credentials, or impersonate the update server with malicious update code.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID: CWE-311
CWE Name: MISSING ENCRYPTION OF SENSITIVE DATA CWE-311
Source: Hangzhou Xiongmai Technology Co., Ltd

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).