CVE-2018-17917 Vulnerability Details

  /     /     /  

CVE-2018-17917 Metadata Quick Info

CVE Published: 10/10/2018 | CVE Updated: 16/09/2024 | CVE Year: 2018
Source: icscert | Vendor: Hangzhou Xiongmai Technology Co., Ltd | Product: XMeye P2P Cloud Server
Status : PUBLISHED

---

CVE-2018-17917 Description

All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server may allow an attacker to use MAC addresses to enumerate potential Cloud IDs. Using this ID, the attacker can discover and connect to valid devices using one of the supported apps.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID: CWE-341
CWE Name: PREDICTABLE FROM OBSERVABLE STATE CWE-341
Source: Hangzhou Xiongmai Technology Co., Ltd

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).