Critical severity9.8NVD Advisory· Published Oct 10, 2018· Updated Jun 17, 2026

CVE-2018-17915

Description

All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server do not encrypt all device communication. This includes the XMeye service and firmware update communication. This could allow an attacker to eavesdrop on video feeds, steal XMeye login credentials, or impersonate the update server with malicious update code.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Xiongmaitech/Xmeye P2p Cloud Server
cpe:2.3:a:xiongmaitech:xmeye_p2p_cloud_server:-:*:*:*:*:*:*:*
Hangzhou Xiongmai Technology Co., Ltd/Xmeye P2p Cloud Serverllm-fuzzy2 versions
all versions+ 1 more
- (no CPE)range: all versions
- (no CPE)range: All versions

Patches

Vulnerability mechanics

References

ics-cert.us-cert.gov/advisories/ICSA-18-282-06nvdThird Party AdvisoryUS Government Resource

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000