CVE-2018-17915

9.8 criticalEPSS 1.1%

Critical (9.8) in xiongmaitech xmeye p2p cloud server. EPSS 1.1% chance of exploitation in the next 30 days.

All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server do not encrypt all device communication. This includes the XMeye service and firmware update communication. This could allow an attacker to eavesdrop on video feeds, steal XMeye login credentials, or impersonate the update server with malicious update code.

Severity

CVSS 3.0

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 64% of CVEs (scores of 2026-10-31)
CWE: CWE-311
Published: 2018-10-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

xiongmaitech:xmeye_p2p_cloud_server

References

https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06
https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06

Check your stack JSON