P2P Cloud Server Vulnerability in Hangzhou Xiongmai Technology Products
CVE-2018-17917

5.3MEDIUM

Key Information:

Vendor: Hangzhou Xiongmai Technology Co., Ltd
Status: Xmeye P2p Cloud Server
Vendor: CVE Published:; 10 October 2018

🔔 Create Hangzhou Xiongmai Technology Co., Ltd Vulnerability Alert

What is CVE-2018-17917?

The XMeye P2P Cloud Server developed by Hangzhou Xiongmai Technology Co., Ltd is susceptible to a vulnerability that allows attackers to utilize MAC addresses for device enumeration. This flaw potentially enables malicious actors to discover valid Cloud IDs associated with devices, facilitating unauthorized access through supported applications. Users are urged to take preventive measures to secure their devices and monitor for any unusual activity.

Affected Version(s)

XMeye P2P Cloud Server All versions

References

https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06

x_refsource_MISC

CVSS V3.1

Score:

5.3

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

None

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 10, 2018
Vulnerability Reserved
Oct 2, 2018

CVE-2018-17917 Data

JSON