CVE-2018-17919

6.5 mediumEPSS 1.0%

Medium (6.5) in xiongmaitech xmeye p2p cloud server. EPSS 1.0% chance of exploitation in the next 30 days.

All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server may allow an attacker to use an undocumented user account "default" with its default password to login to XMeye and access/view video streams.

Severity

CVSS 3.0

6.5 medium

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 62% of CVEs (scores of 2026-10-31)
CWEs: CWE-798, CWE-912
Published: 2018-10-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

xiongmaitech:xmeye_p2p_cloud_server

References

https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06
https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06

Check your stack JSON