← CVE Intelligence

CVE-2018-17915

Hangzhou Xiongmai Technology Co., Ltd / XMeye P2P Cloud Server PUBLISHED

Description (CNA)

All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server do not encrypt all device communication. This includes the XMeye service and firmware update communication. This could allow an attacker to eavesdrop on video feeds, steal XMeye login credentials, or impersonate the update server with malicious update code.

Affected (CNA)

Vendor / productVersions
Hangzhou Xiongmai Technology Co., Ltd / XMeye P2P Cloud Serveraffected All versions

CWE

CWE-311

References

ADP enrichment

CVE

No English description supplied.