Search
Find a vulnerability
Search criteria
18 vulnerabilities by xiongmaitech
VAR-202211-0589
Vulnerability from variot - Updated: 2025-05-01 20:21Xiongmai Camera XM-JPR2-LX V4.02.R12.A6420987.10002.147502.00000 is vulnerable to plain-text traffic sniffing. xiongmaitech of xm-jpr2-lx A vulnerability exists in the firmware regarding the transmission of sensitive information in plaintext.Information may be obtained
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-202211-0589",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "xm-jpr2-lx",
"scope": "lte",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": "4.02.r12.a6420987.10002.147502.00000"
},
{
"model": "xm-jpr2-lx",
"scope": "eq",
"trust": 0.8,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "xm-jpr2-lx",
"scope": null,
"trust": 0.8,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "xm-jpr2-lx",
"scope": "lte",
"trust": 0.8,
"vendor": "xiongmaitech",
"version": "xm-jpr2-lx firmware 4.02.r12.a6420987.10002.147502.00000 and earlier"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2021-020522"
},
{
"db": "NVD",
"id": "CVE-2021-38828"
}
]
},
"cve": "CVE-2021-38828",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [],
"cvssV3": [
{
"attackComplexity": "HIGH",
"attackVector": "ADJACENT",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 1.6,
"id": "CVE-2021-38828",
"impactScore": 3.6,
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 2.0,
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
{
"attackComplexity": "High",
"attackVector": "Adjacent Network",
"author": "NVD",
"availabilityImpact": "None",
"baseScore": 5.3,
"baseSeverity": "Medium",
"confidentialityImpact": "High",
"exploitabilityScore": null,
"id": "CVE-2021-38828",
"impactScore": null,
"integrityImpact": "None",
"privilegesRequired": "None",
"scope": "Unchanged",
"trust": 0.8,
"userInteraction": "None",
"vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2021-38828",
"trust": 1.0,
"value": "MEDIUM"
},
{
"author": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"id": "CVE-2021-38828",
"trust": 1.0,
"value": "MEDIUM"
},
{
"author": "NVD",
"id": "CVE-2021-38828",
"trust": 0.8,
"value": "Medium"
},
{
"author": "CNNVD",
"id": "CNNVD-202211-2676",
"trust": 0.6,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2021-020522"
},
{
"db": "CNNVD",
"id": "CNNVD-202211-2676"
},
{
"db": "NVD",
"id": "CVE-2021-38828"
},
{
"db": "NVD",
"id": "CVE-2021-38828"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Xiongmai Camera XM-JPR2-LX V4.02.R12.A6420987.10002.147502.00000 is vulnerable to plain-text traffic sniffing. xiongmaitech of xm-jpr2-lx A vulnerability exists in the firmware regarding the transmission of sensitive information in plaintext.Information may be obtained",
"sources": [
{
"db": "NVD",
"id": "CVE-2021-38828"
},
{
"db": "JVNDB",
"id": "JVNDB-2021-020522"
}
],
"trust": 1.62
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2021-38828",
"trust": 3.3
},
{
"db": "JVNDB",
"id": "JVNDB-2021-020522",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-202211-2676",
"trust": 0.6
},
{
"db": "OTHER",
"id": "NONE",
"trust": 0.1
}
],
"sources": [
{
"db": "OTHER",
"id": null
},
{
"db": "JVNDB",
"id": "JVNDB-2021-020522"
},
{
"db": "CNNVD",
"id": "CNNVD-202211-2676"
},
{
"db": "NVD",
"id": "CVE-2021-38828"
}
]
},
"id": "VAR-202211-0589",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "OTHER",
"id": null
}
],
"trust": 0.01
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"camera device"
],
"sub_category": "camera",
"trust": 0.1
}
],
"sources": [
{
"db": "OTHER",
"id": null
}
]
},
"last_update_date": "2025-05-01T20:21:32.144000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Xiongmai Camera XM-JPR2-LX Security vulnerabilities",
"trust": 0.6,
"url": "http://123.124.177.30/web/xxk/bdxqById.tag?id=214412"
}
],
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-202211-2676"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-319",
"trust": 1.0
},
{
"problemtype": "Sending important information in clear text (CWE-319) [NVD evaluation ]",
"trust": 0.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2021-020522"
},
{
"db": "NVD",
"id": "CVE-2021-38828"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.4,
"url": "https://github.com/chandlerchin/xiongmaicamera/blob/main/sniffing%20the%20plain-text%20traffic%20in%20xiongmai%20camera.pdf"
},
{
"trust": 1.4,
"url": "https://nvd.nist.gov/vuln/detail/cve-2021-38828"
},
{
"trust": 0.6,
"url": "https://cxsecurity.com/cveshow/cve-2021-38828/"
},
{
"trust": 0.1,
"url": "https://ieeexplore.ieee.org/abstract/document/10769424"
}
],
"sources": [
{
"db": "OTHER",
"id": null
},
{
"db": "JVNDB",
"id": "JVNDB-2021-020522"
},
{
"db": "CNNVD",
"id": "CNNVD-202211-2676"
},
{
"db": "NVD",
"id": "CVE-2021-38828"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "OTHER",
"id": null
},
{
"db": "JVNDB",
"id": "JVNDB-2021-020522"
},
{
"db": "CNNVD",
"id": "CNNVD-202211-2676"
},
{
"db": "NVD",
"id": "CVE-2021-38828"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2023-11-06T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2021-020522"
},
{
"date": "2022-11-13T00:00:00",
"db": "CNNVD",
"id": "CNNVD-202211-2676"
},
{
"date": "2022-11-14T02:15:09.250000",
"db": "NVD",
"id": "CVE-2021-38828"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2023-11-06T08:10:00",
"db": "JVNDB",
"id": "JVNDB-2021-020522"
},
{
"date": "2022-11-18T00:00:00",
"db": "CNNVD",
"id": "CNNVD-202211-2676"
},
{
"date": "2025-04-30T21:15:51.843000",
"db": "NVD",
"id": "CVE-2021-38828"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote or local",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-202211-2676"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "xiongmaitech\u00a0 of \u00a0xm-jpr2-lx\u00a0 Vulnerability in cleartext transmission of sensitive information in firmware",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2021-020522"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "other",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-202211-2676"
}
],
"trust": 0.6
}
}
VAR-201704-1424
Vulnerability from variot - Updated: 2025-04-20 23:43XiongMai uc-httpd has directory traversal allowing the reading of arbitrary files via a "GET ../" HTTP request. XiongMaiuc-httpd is an HTTP protection program used by cameras from cameras such as XiongMai. A directory traversal vulnerability exists in XiongMaiuc-httpd
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201704-1424",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "uc-httpd",
"scope": "eq",
"trust": 1.6,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "uc-httpd",
"scope": null,
"trust": 0.8,
"vendor": "xiongmai",
"version": null
},
{
"model": "xiongmaitech",
"scope": null,
"trust": 0.6,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "uc-httpd",
"scope": "eq",
"trust": 0.6,
"vendor": "xiongmai",
"version": null
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2017-32133"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-002986"
},
{
"db": "CNNVD",
"id": "CNNVD-201704-446"
},
{
"db": "NVD",
"id": "CVE-2017-7577"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/a:xiongmai_technologies:uc-httpd",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2017-002986"
}
]
},
"cve": "CVE-2017-7577",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CVE-2017-7577",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 1.8,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CNVD-2017-32133",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "nvd@nist.gov",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 3.9,
"id": "CVE-2017-7577",
"impactScore": 5.9,
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.8,
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2017-7577",
"trust": 1.0,
"value": "CRITICAL"
},
{
"author": "NVD",
"id": "CVE-2017-7577",
"trust": 0.8,
"value": "Critical"
},
{
"author": "CNVD",
"id": "CNVD-2017-32133",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-201704-446",
"trust": 0.6,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2017-32133"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-002986"
},
{
"db": "CNNVD",
"id": "CNNVD-201704-446"
},
{
"db": "NVD",
"id": "CVE-2017-7577"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "XiongMai uc-httpd has directory traversal allowing the reading of arbitrary files via a \"GET ../\" HTTP request. XiongMaiuc-httpd is an HTTP protection program used by cameras from cameras such as XiongMai. A directory traversal vulnerability exists in XiongMaiuc-httpd",
"sources": [
{
"db": "NVD",
"id": "CVE-2017-7577"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-002986"
},
{
"db": "CNVD",
"id": "CNVD-2017-32133"
}
],
"trust": 2.16
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2017-7577",
"trust": 3.0
},
{
"db": "JVNDB",
"id": "JVNDB-2017-002986",
"trust": 0.8
},
{
"db": "CNVD",
"id": "CNVD-2017-32133",
"trust": 0.6
},
{
"db": "CNNVD",
"id": "CNNVD-201704-446",
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2017-32133"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-002986"
},
{
"db": "CNNVD",
"id": "CNNVD-201704-446"
},
{
"db": "NVD",
"id": "CVE-2017-7577"
}
]
},
"id": "VAR-201704-1424",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2017-32133"
}
],
"trust": 0.06
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"Network device"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2017-32133"
}
]
},
"last_update_date": "2025-04-20T23:43:05.229000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Top Page",
"trust": 0.8,
"url": "http://www.xiongmaitech.com/en/"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2017-002986"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-22",
"trust": 1.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2017-002986"
},
{
"db": "NVD",
"id": "CVE-2017-7577"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 3.0,
"url": "http://zeroday.insecurity.zone/exploits/uc-httpd_lfi.txt"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2017-7577"
},
{
"trust": 0.8,
"url": "https://nvd.nist.gov/vuln/detail/cve-2017-7577"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2017-32133"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-002986"
},
{
"db": "CNNVD",
"id": "CNNVD-201704-446"
},
{
"db": "NVD",
"id": "CVE-2017-7577"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2017-32133"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-002986"
},
{
"db": "CNNVD",
"id": "CNNVD-201704-446"
},
{
"db": "NVD",
"id": "CVE-2017-7577"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2017-10-31T00:00:00",
"db": "CNVD",
"id": "CNVD-2017-32133"
},
{
"date": "2017-05-10T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2017-002986"
},
{
"date": "2017-04-07T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201704-446"
},
{
"date": "2017-04-07T04:59:00.190000",
"db": "NVD",
"id": "CVE-2017-7577"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2018-10-31T00:00:00",
"db": "CNVD",
"id": "CNVD-2017-32133"
},
{
"date": "2017-05-10T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2017-002986"
},
{
"date": "2017-10-09T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201704-446"
},
{
"date": "2025-04-20T01:37:25.860000",
"db": "NVD",
"id": "CVE-2017-7577"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201704-446"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "XiongMai uc-httpd Vulnerable to directory traversal",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2017-002986"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "path traversal",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201704-446"
}
],
"trust": 0.6
}
}
VAR-201712-0119
Vulnerability from variot - Updated: 2025-04-20 23:25A Stack-based Buffer Overflow issue was discovered in Xiongmai Technology IP Cameras and DVRs using the NetSurveillance Web interface. The stack-based buffer overflow vulnerability has been identified, which may allow an attacker to execute code remotely or crash the device. After rebooting, the device restores itself to a more vulnerable state in which Telnet is accessible. Xiongmai Technology IP Camera and DVR Contains a buffer error vulnerability.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. Xiongmai IPCameraModule and DVR are products of XiongMai. XiongmaiIPCameraModule is an IP camera module product. The DVR is a hard disk recorder. Xiongmai IP Camera Module and DVR are prone to a stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. Failed exploit attempts will likely cause a denial-of-service condition
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201712-0119",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "ipg-50hv20psb-s",
"scope": "eq",
"trust": 1.6,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ipg-83h20pa-s",
"scope": "eq",
"trust": 1.6,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ipg-hp500nr-s",
"scope": "eq",
"trust": 1.6,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ipg-83h20pa-a",
"scope": "eq",
"trust": 1.6,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ipg-50hv20psa-s",
"scope": "eq",
"trust": 1.6,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ivg-hp203y-se",
"scope": "eq",
"trust": 1.6,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ipg-80he20ps-s",
"scope": "eq",
"trust": 1.6,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ivg-hp203y-ae",
"scope": "eq",
"trust": 1.6,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ipg-50hv20psb-a",
"scope": "eq",
"trust": 1.6,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ipg-53h13pe-wk-4f",
"scope": "eq",
"trust": 1.6,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ahb7016t-lm-v3",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": "4.02.r11.3070"
},
{
"model": "ahb7004t-gl-v4",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": "4.02.r11.7601"
},
{
"model": "ipg-50h10pl-ae",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ahb7016t-lme-v3",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": "4.02.r11.7601"
},
{
"model": "ahb7008f8-g-v4",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": "4.02.r11.7601"
},
{
"model": "ipg-53h20pl-s",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ipg-53h13p-ae",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ipg-50h10pe-s",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ipg-83h40af",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ipg-53hv13pa-s",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ipg-83h40pl-p",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ipm-50h10pe-wrc",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ahb7016t-lm-v2",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": "4.02.r11.7601"
},
{
"model": "ipg-53x13pt-s",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ipg-53h13pet-s",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ipg-53h13pe-wk",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ipg-54h13pe-s",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ahb7804r-lms-v3",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": "4.02.r11.nat.onvifc.20171019"
},
{
"model": "ahb7032f4-lm-v3",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": "4.02.r11.7601"
},
{
"model": "ipm-53hv13pe-wr",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ahb7004t-lm-v3",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": "4.02.r11.3070"
},
{
"model": "ahb7008f2-g-v4",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": "4.02.r11.7601"
},
{
"model": "ahb7004t-g-v4",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": "4.02.r11.7601"
},
{
"model": "ipg-53x13pa-s",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ahb7008f2-h",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": "4.02.r11.3070"
},
{
"model": "ipg-50hv20pet-s",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ipg-53h20pl-p",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ipm-50h10pe-wrm",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ahb7004t-lme-v3",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": "4.02.r11.7601"
},
{
"model": "ipm-53h13pe-wrc",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ahb7808r-mh-v3",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": "4.02.r11.7601"
},
{
"model": "ipg-53h13pls-s",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ipm-53v13pl-wr",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ipg-50hv10pt-a",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ipg-53hv13pa-wp",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ahb7032f2-lm-v3",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": "4.02.r11.7601"
},
{
"model": "ipg-53h13p-p",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ipg-83h20pl-p",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ipg-53h20py-s",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ahb7004t-gs-v3",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": "4.02.r11.7601"
},
{
"model": "ipg-53x13pe-s",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ahb7016t-gs-v3",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": "4.02.r11.7601"
},
{
"model": "ahb7808r-ms-v3",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": "4.02.r11.nat.onvifc.20170327"
},
{
"model": "ahb7804r-ms-v3",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": "4.02.r11.nat.onvifc.20170327"
},
{
"model": "ahb7016t-mh-v3",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": "4.02.r11.7601"
},
{
"model": "ahb7016t4-mh-v2",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": "4.02.r11.7601"
},
{
"model": "ipg-50hv20pes-s",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ahb7016f8-gl-v4",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": "4.02.r11.7601"
},
{
"model": "ahb7008t-mh-v3",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": "4.02.r11.7601"
},
{
"model": "ipg-80h20pt-a",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ipm-50hv10pt-wr",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ipg-50h10pl-b",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ahb7008t4-h-v2",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": "4.02.r11.7601"
},
{
"model": "ahb7804r-lm-v3",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": "4.02.r11.nat.onvifc.20171120"
},
{
"model": "ahb7008t-lm-v2",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": "4.02.r11.7601"
},
{
"model": "ipg-53h13pes-s",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ipg-50hv10pt-wp",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ipg-53h20pl-ae",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ipm-50hv20pe-wr",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ipg-83h50p-p",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ipg-50h10pl-p",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ahb7016f2-gl-v4",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": "4.02.r11.7601"
},
{
"model": "ipg-83h50p-b",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ahb7008t-lm-v3",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": "4.02.r11.3070"
},
{
"model": "ipg-52h10pl-b",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ipg-53h13pl-p",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ahb7016t-mh-v2",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": "4.02.r11.7601"
},
{
"model": "ahb7008t-lme-v3",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": "4.02.r11.7601"
},
{
"model": "ipg-53h13pl-ae",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ipg-54h20pl-s",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ahb7032f4-gs-v3",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": "4.02.r11.7601"
},
{
"model": "ipg-53hv13pa-a",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ipg-80h20pt-s",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ahb7016f8-gs-v3",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": "4.02.r11.7601"
},
{
"model": "ipg-50h10pl-s",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ipg-53h10pe-s",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ahb7008t-mh-v2",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": "4.02.r11.7601"
},
{
"model": "ipg-50hv10pt-s",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ipg-53h20pl-b",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ipg-50h10pe-wp",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ipg-50hv10pv-a",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ahb7032f2-gs-v3",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": "4.02.r11.7601"
},
{
"model": "ipg-53hv13pt-s",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ahb7032f8-gs-v3",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": "4.02.r11.7601"
},
{
"model": "ipm-50h10pe-wr",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ipm-50h10pe-o\\",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ahb7008t-gs-v3",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": "4.02.r11.7601"
},
{
"model": "ahb7008f8-h",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": "4.02.r11.3070"
},
{
"model": "ahb7004t-h-v2",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": "4.02.r11.7601"
},
{
"model": "ahb7008f4-h",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": "4.02.r11.3070"
},
{
"model": "ipg-50h10pl-r",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ipg-53h13pe-s",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ipg-50x10pt-s",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ahb7004t-mh-v2",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": "4.02.r11.7601"
},
{
"model": "ahb7016t4-gs-v3",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": "4.02.r11.7601"
},
{
"model": "ipg-53h13p-s",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ipg-83h40pl-b",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ipg-52h10pl-p",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ahb7008t-gl-v4",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": "4.02.r11.7601"
},
{
"model": "ipg-53h13pl-r",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ahb7008t4-h-v2",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": "_firmware"
},
{
"model": "ipg-50hv20pet-a",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ipg-50x10pe-s",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ipg-53h13pl-s",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ipg-50h10pe-sl",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ipg-50h10pe-wk",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ipm-53h13pe-wrm",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ipm-50v10pl-wr",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ipg-83h20pl-b",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ipm-53h13pe-wr",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ipg-50h20pt-s",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ipg-53h13pl-b",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ahb7008t-h-v2",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": "4.02.r11.7601"
},
{
"model": "ahb7032f4-lm-v2",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": "4.02.r11.7601"
},
{
"model": "ahb7808r-lm-v3",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": "4.02.r11.nat.onvifc.20171120"
},
{
"model": "ahb7016f4-gl-v4",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": "4.02.r11.7601"
},
{
"model": "ahb7032f8-lm-v2",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": "4.02.r11.7601"
},
{
"model": "ahb7008f4-g-v4",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": "4.02.r11.7601"
},
{
"model": "ipg-53h13pe-wp",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ipg-50hv10pv-s",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ipg-53h13pes-sl",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ipg-50h10pe-wk-2f",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ipm-50v10pl-wrc",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ipg-53h13p-b",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ahb7804r-mh-v3",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": "4.02.r11.7601"
},
{
"model": "ahb7004t-mh-v3",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": "4.02.r11.7601"
},
{
"model": "ahb7008f8-h",
"scope": null,
"trust": 0.8,
"vendor": "xiongmai",
"version": null
},
{
"model": "ipg-50h10pl-p",
"scope": null,
"trust": 0.8,
"vendor": "xiongmai",
"version": null
},
{
"model": "ipm-50hv10pt-wr",
"scope": null,
"trust": 0.8,
"vendor": "xiongmai",
"version": null
},
{
"model": "ivg-hp203y-ae",
"scope": null,
"trust": 0.8,
"vendor": "xiongmai",
"version": null
},
{
"model": "technology ip cameras and dvrs",
"scope": null,
"trust": 0.6,
"vendor": "xiongmai",
"version": null
},
{
"model": "4.02.r11.7601",
"scope": null,
"trust": 0.4,
"vendor": "ahb7008t h v2",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.4,
"vendor": "ipg 53hv13pt s",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.4,
"vendor": "ipg 54h20pl s",
"version": null
},
{
"model": "xvi dvr board",
"scope": "eq",
"trust": 0.3,
"vendor": "xiongmai",
"version": "0"
},
{
"model": "ip camera module",
"scope": "eq",
"trust": 0.3,
"vendor": "xiongmai",
"version": "0"
},
{
"model": "ahd dvr board",
"scope": "eq",
"trust": 0.3,
"vendor": "xiongmai",
"version": "0"
},
{
"model": "4.02.r11.3070",
"scope": null,
"trust": 0.2,
"vendor": "ahb7008f8 h",
"version": null
},
{
"model": "4.02.r11.7601",
"scope": null,
"trust": 0.2,
"vendor": "ahb7016t mh v2",
"version": null
},
{
"model": "4.02.r11.7601",
"scope": null,
"trust": 0.2,
"vendor": "ahb7008t4 h v2",
"version": null
},
{
"model": "",
"scope": null,
"trust": 0.2,
"vendor": "ahb7008t4 h v2",
"version": null
},
{
"model": "4.02.r11.7601",
"scope": null,
"trust": 0.2,
"vendor": "ahb7032f8 lm v2",
"version": null
},
{
"model": "4.02.r11.7601",
"scope": null,
"trust": 0.2,
"vendor": "ahb7032f4 lm v2",
"version": null
},
{
"model": "4.02.r11.nat.onvifc.20170327",
"scope": null,
"trust": 0.2,
"vendor": "ahb7808r ms v3",
"version": null
},
{
"model": "4.02.r11.nat.onvifc.20170327",
"scope": null,
"trust": 0.2,
"vendor": "ahb7804r ms v3",
"version": null
},
{
"model": "4.02.r11.3070",
"scope": null,
"trust": 0.2,
"vendor": "ahb7016t lm v3",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipm 50h10pe wrm",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipm 53h13pe wrm",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipg 83h40af",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipm 50v10pl wrc",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipm 50h10pe wrc",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipg 50x10pt s",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipg 50x10pe s",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipg 53x13pt s",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipg 53x13pa s",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipg 53x13pe s",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipm 53h13pe wrc",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipm 53hv13pe wr",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipm 53v13pl wr",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipm 53h13pe wr",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipg 50h10pe wk 2f",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipg 83h20pl p",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipg 83h20pl b",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipg 53hv13pa a",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipg 53hv13pa s",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipm 50hv20pe wr",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipg 50hv10pt a",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipg 50hv10pt s",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipg 50hv10pv a",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipg 50hv10pv s",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipg 80h20pt a",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipg 80h20pt s",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipg 50h20pt s",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipg 53h20py s",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipg 53h13pe wk 4f",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipg 83h20pa a",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipg 83h20pa s",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipg 50hv20psa s",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipg 50hv20psb a",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipg 50hv20psb s",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ivg hp203y ae",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ivg hp203y se",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipg hp500nr s",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipg 80he20ps s",
"version": null
},
{
"model": "4.02.r11.3070",
"scope": null,
"trust": 0.2,
"vendor": "ahb7008f4 h",
"version": null
},
{
"model": "4.02.r11.3070",
"scope": null,
"trust": 0.2,
"vendor": "ahb7008t lm v3",
"version": null
},
{
"model": "4.02.r11.3070",
"scope": null,
"trust": 0.2,
"vendor": "ahb7004t lm v3",
"version": null
},
{
"model": "4.02.r11.7601",
"scope": null,
"trust": 0.2,
"vendor": "ahb7016t4 gs v3",
"version": null
},
{
"model": "4.02.r11.7601",
"scope": null,
"trust": 0.2,
"vendor": "ahb7016t gs v3",
"version": null
},
{
"model": "4.02.r11.7601",
"scope": null,
"trust": 0.2,
"vendor": "ahb7008t gs v3",
"version": null
},
{
"model": "4.02.r11.7601",
"scope": null,
"trust": 0.2,
"vendor": "ahb7004t gs v3",
"version": null
},
{
"model": "4.02.r11.7601",
"scope": null,
"trust": 0.2,
"vendor": "ahb7016t mh v3",
"version": null
},
{
"model": "4.02.r11.7601",
"scope": null,
"trust": 0.2,
"vendor": "ahb7008t mh v3",
"version": null
},
{
"model": "4.02.r11.7601",
"scope": null,
"trust": 0.2,
"vendor": "ahb7004t mh v3",
"version": null
},
{
"model": "4.02.r11.7601",
"scope": null,
"trust": 0.2,
"vendor": "ahb7008t gl v4",
"version": null
},
{
"model": "4.02.r11.3070",
"scope": null,
"trust": 0.2,
"vendor": "ahb7008f2 h",
"version": null
},
{
"model": "4.02.r11.7601",
"scope": null,
"trust": 0.2,
"vendor": "ahb7004t gl v4",
"version": null
},
{
"model": "4.02.r11.7601",
"scope": null,
"trust": 0.2,
"vendor": "ahb7004t g v4",
"version": null
},
{
"model": "4.02.r11.7601",
"scope": null,
"trust": 0.2,
"vendor": "ahb7016f8 gs v3",
"version": null
},
{
"model": "4.02.r11.7601",
"scope": null,
"trust": 0.2,
"vendor": "ahb7016f8 gl v4",
"version": null
},
{
"model": "4.02.r11.7601",
"scope": null,
"trust": 0.2,
"vendor": "ahb7016f4 gl v4",
"version": null
},
{
"model": "4.02.r11.7601",
"scope": null,
"trust": 0.2,
"vendor": "ahb7016f2 gl v4",
"version": null
},
{
"model": "4.02.r11.nat.onvifc.20171120",
"scope": null,
"trust": 0.2,
"vendor": "ahb7808r lm v3",
"version": null
},
{
"model": "4.02.r11.nat.onvifc.20171120",
"scope": null,
"trust": 0.2,
"vendor": "ahb7804r lm v3",
"version": null
},
{
"model": "4.02.r11.nat.onvifc.20171019",
"scope": null,
"trust": 0.2,
"vendor": "ahb7804r lms v3",
"version": null
},
{
"model": "4.02.r11.7601",
"scope": null,
"trust": 0.2,
"vendor": "ahb7008f8 g v4",
"version": null
},
{
"model": "4.02.r11.7601",
"scope": null,
"trust": 0.2,
"vendor": "ahb7008t mh v2",
"version": null
},
{
"model": "4.02.r11.7601",
"scope": null,
"trust": 0.2,
"vendor": "ahb7008f4 g v4",
"version": null
},
{
"model": "4.02.r11.7601",
"scope": null,
"trust": 0.2,
"vendor": "ahb7008f2 g v4",
"version": null
},
{
"model": "4.02.r11.7601",
"scope": null,
"trust": 0.2,
"vendor": "ahb7032f4 lm v3",
"version": null
},
{
"model": "4.02.r11.7601",
"scope": null,
"trust": 0.2,
"vendor": "ahb7032f2 lm v3",
"version": null
},
{
"model": "4.02.r11.7601",
"scope": null,
"trust": 0.2,
"vendor": "ahb7032f8 gs v3",
"version": null
},
{
"model": "4.02.r11.7601",
"scope": null,
"trust": 0.2,
"vendor": "ahb7032f4 gs v3",
"version": null
},
{
"model": "4.02.r11.7601",
"scope": null,
"trust": 0.2,
"vendor": "ahb7032f2 gs v3",
"version": null
},
{
"model": "4.02.r11.7601",
"scope": null,
"trust": 0.2,
"vendor": "ahb7016t lme v3",
"version": null
},
{
"model": "4.02.r11.7601",
"scope": null,
"trust": 0.2,
"vendor": "ahb7008t lme v3",
"version": null
},
{
"model": "4.02.r11.7601",
"scope": null,
"trust": 0.2,
"vendor": "ahb7004t lme v3",
"version": null
},
{
"model": "4.02.r11.7601",
"scope": null,
"trust": 0.2,
"vendor": "ahb7004t mh v2",
"version": null
},
{
"model": "4.02.r11.7601",
"scope": null,
"trust": 0.2,
"vendor": "ahb7808r mh v3",
"version": null
},
{
"model": "4.02.r11.7601",
"scope": null,
"trust": 0.2,
"vendor": "ahb7804r mh v3",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipg 50h10pl p",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipg 50h10pl b",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipg 50h10pl ae",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipg 50h10pl s",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipg 52h10pl p",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipg 52h10pl b",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipg 53h13pet s",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipg 53h13pls s",
"version": null
},
{
"model": "4.02.r11.7601",
"scope": null,
"trust": 0.2,
"vendor": "ahb7004t h v2",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipg 53h13pes s",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipg 53h13pes sl",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipg 53h13pl p",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipg 53h13pl b",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipg 53h13pl ae",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipg 53h13pl s",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipg 53h13p p",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipg 53h13p b",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipg 53h13p ae",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipg 53h13p s",
"version": null
},
{
"model": "4.02.r11.7601",
"scope": null,
"trust": 0.2,
"vendor": "ahb7016t lm v2",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipg 83h40pl b",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipg 83h40pl p",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipg 83h50p p",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipg 83h50p b",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipg 53h10pe s",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipg 50h10pe sl",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipg 50h10pe s",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipm 50hv10pt wr",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipm 50v10pl wr",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipm 50h10pe wr",
"version": null
},
{
"model": "4.02.r11.7601",
"scope": null,
"trust": 0.2,
"vendor": "ahb7008t lm v2",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipg 54h13pe s",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipg 50h10pl r",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipm 50h10pe o r",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipg 53h13pl r",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipg 50h10pe wp",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipg 50hv10pt wp",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipg 53hv13pa wp",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipg 53h13pe wp",
"version": null
},
{
"model": "4.02.r11.7601",
"scope": null,
"trust": 0.2,
"vendor": "ahb7016t4 mh v2",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipg 53h20pl p",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipg 53h20pl b",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipg 53h20pl ae",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipg 53h20pl s",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipg 50hv20pet a",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipg 50hv20pet s",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipg 50hv20pes s",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipg 50h10pe wk",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipg 53h13pe wk",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "ipg 53h13pe s",
"version": null
}
],
"sources": [
{
"db": "IVD",
"id": "e2df8100-39ab-11e9-aca3-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2017-36865"
},
{
"db": "BID",
"id": "102125"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-011817"
},
{
"db": "CNNVD",
"id": "CNNVD-201712-359"
},
{
"db": "NVD",
"id": "CVE-2017-16725"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/o:xiongmai_technologies:ahb7008f8-h_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:xiongmai_technologies:ipg-50h10pl-p_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:xiongmai_technologies:ipm-50hv10pt-wr_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:xiongmai_technologies:ivg-hp203y-ae_firmware",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2017-011817"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Clinton Mielke",
"sources": [
{
"db": "BID",
"id": "102125"
},
{
"db": "CNNVD",
"id": "CNNVD-201712-359"
}
],
"trust": 0.9
},
"cve": "CVE-2017-16725",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 10.0,
"id": "CVE-2017-16725",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 1.9,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 10.0,
"id": "CNVD-2017-36865",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "IVD",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 10.0,
"id": "e2df8100-39ab-11e9-aca3-000c29342cb1",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 0.2,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.9 [IVD]"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 10.0,
"id": "VHN-107676",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 0.1,
"vectorString": "AV:N/AC:L/AU:N/C:C/I:C/A:C",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "nvd@nist.gov",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 3.9,
"id": "CVE-2017-16725",
"impactScore": 5.9,
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.8,
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2017-16725",
"trust": 1.0,
"value": "CRITICAL"
},
{
"author": "NVD",
"id": "CVE-2017-16725",
"trust": 0.8,
"value": "Critical"
},
{
"author": "CNVD",
"id": "CNVD-2017-36865",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "CNNVD",
"id": "CNNVD-201712-359",
"trust": 0.6,
"value": "CRITICAL"
},
{
"author": "IVD",
"id": "e2df8100-39ab-11e9-aca3-000c29342cb1",
"trust": 0.2,
"value": "CRITICAL"
},
{
"author": "VULHUB",
"id": "VHN-107676",
"trust": 0.1,
"value": "HIGH"
},
{
"author": "VULMON",
"id": "CVE-2017-16725",
"trust": 0.1,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "IVD",
"id": "e2df8100-39ab-11e9-aca3-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2017-36865"
},
{
"db": "VULHUB",
"id": "VHN-107676"
},
{
"db": "VULMON",
"id": "CVE-2017-16725"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-011817"
},
{
"db": "CNNVD",
"id": "CNNVD-201712-359"
},
{
"db": "NVD",
"id": "CVE-2017-16725"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "A Stack-based Buffer Overflow issue was discovered in Xiongmai Technology IP Cameras and DVRs using the NetSurveillance Web interface. The stack-based buffer overflow vulnerability has been identified, which may allow an attacker to execute code remotely or crash the device. After rebooting, the device restores itself to a more vulnerable state in which Telnet is accessible. Xiongmai Technology IP Camera and DVR Contains a buffer error vulnerability.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. Xiongmai IPCameraModule and DVR are products of XiongMai. XiongmaiIPCameraModule is an IP camera module product. The DVR is a hard disk recorder. Xiongmai IP Camera Module and DVR are prone to a stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. Failed exploit attempts will likely cause a denial-of-service condition",
"sources": [
{
"db": "NVD",
"id": "CVE-2017-16725"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-011817"
},
{
"db": "CNVD",
"id": "CNVD-2017-36865"
},
{
"db": "BID",
"id": "102125"
},
{
"db": "IVD",
"id": "e2df8100-39ab-11e9-aca3-000c29342cb1"
},
{
"db": "VULHUB",
"id": "VHN-107676"
},
{
"db": "VULMON",
"id": "CVE-2017-16725"
}
],
"trust": 2.79
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2017-16725",
"trust": 3.7
},
{
"db": "ICS CERT",
"id": "ICSA-17-341-01",
"trust": 3.5
},
{
"db": "BID",
"id": "102125",
"trust": 2.1
},
{
"db": "CNNVD",
"id": "CNNVD-201712-359",
"trust": 0.9
},
{
"db": "CNVD",
"id": "CNVD-2017-36865",
"trust": 0.8
},
{
"db": "JVNDB",
"id": "JVNDB-2017-011817",
"trust": 0.8
},
{
"db": "IVD",
"id": "E2DF8100-39AB-11E9-ACA3-000C29342CB1",
"trust": 0.2
},
{
"db": "VULHUB",
"id": "VHN-107676",
"trust": 0.1
},
{
"db": "VULMON",
"id": "CVE-2017-16725",
"trust": 0.1
}
],
"sources": [
{
"db": "IVD",
"id": "e2df8100-39ab-11e9-aca3-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2017-36865"
},
{
"db": "VULHUB",
"id": "VHN-107676"
},
{
"db": "VULMON",
"id": "CVE-2017-16725"
},
{
"db": "BID",
"id": "102125"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-011817"
},
{
"db": "CNNVD",
"id": "CNNVD-201712-359"
},
{
"db": "NVD",
"id": "CVE-2017-16725"
}
]
},
"id": "VAR-201712-0119",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "IVD",
"id": "e2df8100-39ab-11e9-aca3-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2017-36865"
},
{
"db": "VULHUB",
"id": "VHN-107676"
}
],
"trust": 1.9
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"ICS",
"Network device"
],
"sub_category": null,
"trust": 0.6
},
{
"category": [
"ICS"
],
"sub_category": null,
"trust": 0.2
}
],
"sources": [
{
"db": "IVD",
"id": "e2df8100-39ab-11e9-aca3-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2017-36865"
}
]
},
"last_update_date": "2025-04-20T23:25:53.937000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Top Page",
"trust": 0.8,
"url": "http://www.xiongmaitech.com/en/index.php"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2017-011817"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-119",
"trust": 1.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-107676"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-011817"
},
{
"db": "NVD",
"id": "CVE-2017-16725"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 3.5,
"url": "https://ics-cert.us-cert.gov/advisories/icsa-17-341-01"
},
{
"trust": 1.9,
"url": "http://www.securityfocus.com/bid/102125"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2017-16725"
},
{
"trust": 0.8,
"url": "https://nvd.nist.gov/vuln/detail/cve-2017-16725"
},
{
"trust": 0.3,
"url": "http://www.xiongmaitech.com/en/"
},
{
"trust": 0.1,
"url": "https://cwe.mitre.org/data/definitions/119.html"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2017-36865"
},
{
"db": "VULHUB",
"id": "VHN-107676"
},
{
"db": "VULMON",
"id": "CVE-2017-16725"
},
{
"db": "BID",
"id": "102125"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-011817"
},
{
"db": "CNNVD",
"id": "CNNVD-201712-359"
},
{
"db": "NVD",
"id": "CVE-2017-16725"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "IVD",
"id": "e2df8100-39ab-11e9-aca3-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2017-36865"
},
{
"db": "VULHUB",
"id": "VHN-107676"
},
{
"db": "VULMON",
"id": "CVE-2017-16725"
},
{
"db": "BID",
"id": "102125"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-011817"
},
{
"db": "CNNVD",
"id": "CNNVD-201712-359"
},
{
"db": "NVD",
"id": "CVE-2017-16725"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2017-12-12T00:00:00",
"db": "IVD",
"id": "e2df8100-39ab-11e9-aca3-000c29342cb1"
},
{
"date": "2017-12-12T00:00:00",
"db": "CNVD",
"id": "CNVD-2017-36865"
},
{
"date": "2017-12-20T00:00:00",
"db": "VULHUB",
"id": "VHN-107676"
},
{
"date": "2017-12-20T00:00:00",
"db": "VULMON",
"id": "CVE-2017-16725"
},
{
"date": "2017-12-07T00:00:00",
"db": "BID",
"id": "102125"
},
{
"date": "2018-01-29T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2017-011817"
},
{
"date": "2017-12-12T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201712-359"
},
{
"date": "2017-12-20T19:29:00.257000",
"db": "NVD",
"id": "CVE-2017-16725"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2017-12-19T00:00:00",
"db": "CNVD",
"id": "CNVD-2017-36865"
},
{
"date": "2018-01-12T00:00:00",
"db": "VULHUB",
"id": "VHN-107676"
},
{
"date": "2018-01-12T00:00:00",
"db": "VULMON",
"id": "CVE-2017-16725"
},
{
"date": "2017-12-19T22:01:00",
"db": "BID",
"id": "102125"
},
{
"date": "2018-01-29T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2017-011817"
},
{
"date": "2017-12-12T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201712-359"
},
{
"date": "2025-04-20T01:37:25.860000",
"db": "NVD",
"id": "CVE-2017-16725"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201712-359"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Xiongmai Technology IP Cameras and DVRs Stack Buffer Overflow Vulnerability",
"sources": [
{
"db": "IVD",
"id": "e2df8100-39ab-11e9-aca3-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2017-36865"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Buffer overflow",
"sources": [
{
"db": "IVD",
"id": "e2df8100-39ab-11e9-aca3-000c29342cb1"
},
{
"db": "CNNVD",
"id": "CNNVD-201712-359"
}
],
"trust": 0.8
}
}
VAR-202206-2284
Vulnerability from variot - Updated: 2025-01-30 22:35Xiaongmai AHB7008T-MH-V2, AHB7804R-ELS, AHB7804R-MH-V2, AHB7808R-MS-V2, AHB7808R-MS, AHB7808T-MS-V2, AHB7804R-LMS, HI3518_50H10L_S39 V4.02.R11.7601.Nat.Onvif.20170420, V4.02.R11.Nat.Onvif.20160422, V4.02.R11.7601.Nat.Onvif.20170424, V4.02.R11.Nat.Onvif.20170327, V4.02.R11.Nat.Onvif.20161205, V4.02.R11.Nat.20170301, V4.02.R12.Nat.OnvifS.20170727 is affected by a backdoor in the macGuarder and dvrHelper binaries of DVR/NVR/IP camera firmware due to static root account credentials in the system. ahb7008t-mh-v2 firmware, ahb7804r-els firmware, ahb7804r-mh-v2 firmware etc. xiongmaitech The product contains authentication vulnerabilities.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-202206-2284",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "ahb7808r-ms-v2",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": "4.02.r11.nat.onvif.20170327"
},
{
"model": "ahb7808r-ms",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": "4.02.r11.nat.onvif.20160328"
},
{
"model": "ahb7808t-ms-v2",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": "4.02.r11.nat.onvifc.20161205"
},
{
"model": "ahb7804r-mh-v2",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": "4.02.r11.7601.nat.onvif.20170424"
},
{
"model": "ahb7804r-els",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": "4.02.r11.nat.onvif.20160422"
},
{
"model": "hi3518e 50h10l s39",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": "4.02.r12.nat.onvifs.20170727"
},
{
"model": "ahb7008t-mh-v2",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": "4.02.r11.7601.nat.onvif.20170420"
},
{
"model": "ahb7804r-lms",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": "4.02.r11.nat.20170301"
},
{
"model": "ahb7808t-ms-v2",
"scope": null,
"trust": 0.8,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ahb7008t-mh-v2",
"scope": null,
"trust": 0.8,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ahb7804r-lms",
"scope": null,
"trust": 0.8,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ahb7808r-ms",
"scope": null,
"trust": 0.8,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "hi3518e 50h10l s39",
"scope": null,
"trust": 0.8,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ahb7804r-mh-v2",
"scope": null,
"trust": 0.8,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ahb7804r-els",
"scope": null,
"trust": 0.8,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "ahb7808r-ms-v2",
"scope": null,
"trust": 0.8,
"vendor": "xiongmaitech",
"version": null
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2021-020030"
},
{
"db": "NVD",
"id": "CVE-2021-41506"
}
]
},
"cve": "CVE-2021-41506",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 10.0,
"id": "CVE-2021-41506",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 1.9,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "nvd@nist.gov",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 3.9,
"id": "CVE-2021-41506",
"impactScore": 5.9,
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
{
"attackComplexity": "Low",
"attackVector": "Network",
"author": "NVD",
"availabilityImpact": "High",
"baseScore": 9.8,
"baseSeverity": "Critical",
"confidentialityImpact": "High",
"exploitabilityScore": null,
"id": "CVE-2021-41506",
"impactScore": null,
"integrityImpact": "High",
"privilegesRequired": "None",
"scope": "Unchanged",
"trust": 0.8,
"userInteraction": "None",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2021-41506",
"trust": 1.0,
"value": "CRITICAL"
},
{
"author": "NVD",
"id": "CVE-2021-41506",
"trust": 0.8,
"value": "Critical"
},
{
"author": "CNNVD",
"id": "CNNVD-202206-2869",
"trust": 0.6,
"value": "CRITICAL"
},
{
"author": "VULMON",
"id": "CVE-2021-41506",
"trust": 0.1,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "VULMON",
"id": "CVE-2021-41506"
},
{
"db": "JVNDB",
"id": "JVNDB-2021-020030"
},
{
"db": "CNNVD",
"id": "CNNVD-202206-2869"
},
{
"db": "NVD",
"id": "CVE-2021-41506"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Xiaongmai AHB7008T-MH-V2, AHB7804R-ELS, AHB7804R-MH-V2, AHB7808R-MS-V2, AHB7808R-MS, AHB7808T-MS-V2, AHB7804R-LMS, HI3518_50H10L_S39 V4.02.R11.7601.Nat.Onvif.20170420, V4.02.R11.Nat.Onvif.20160422, V4.02.R11.7601.Nat.Onvif.20170424, V4.02.R11.Nat.Onvif.20170327, V4.02.R11.Nat.Onvif.20161205, V4.02.R11.Nat.20170301, V4.02.R12.Nat.OnvifS.20170727 is affected by a backdoor in the macGuarder and dvrHelper binaries of DVR/NVR/IP camera firmware due to static root account credentials in the system. ahb7008t-mh-v2 firmware, ahb7804r-els firmware, ahb7804r-mh-v2 firmware etc. xiongmaitech The product contains authentication vulnerabilities.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state",
"sources": [
{
"db": "NVD",
"id": "CVE-2021-41506"
},
{
"db": "JVNDB",
"id": "JVNDB-2021-020030"
},
{
"db": "VULMON",
"id": "CVE-2021-41506"
}
],
"trust": 1.71
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2021-41506",
"trust": 3.4
},
{
"db": "JVNDB",
"id": "JVNDB-2021-020030",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-202206-2869",
"trust": 0.6
},
{
"db": "OTHER",
"id": "NONE",
"trust": 0.1
},
{
"db": "VULMON",
"id": "CVE-2021-41506",
"trust": 0.1
}
],
"sources": [
{
"db": "OTHER",
"id": null
},
{
"db": "VULMON",
"id": "CVE-2021-41506"
},
{
"db": "JVNDB",
"id": "JVNDB-2021-020030"
},
{
"db": "CNNVD",
"id": "CNNVD-202206-2869"
},
{
"db": "NVD",
"id": "CVE-2021-41506"
}
]
},
"id": "VAR-202206-2284",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "OTHER",
"id": null
}
],
"trust": 0.01
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"camera device",
"embedded device"
],
"sub_category": "SoC",
"trust": 0.1
},
{
"category": [
"camera device",
"embedded device"
],
"sub_category": "IP camera",
"trust": 0.1
}
],
"sources": [
{
"db": "OTHER",
"id": null
}
]
},
"last_update_date": "2025-01-30T22:35:59.258000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Xiongmai Multiple products Security vulnerabilities",
"trust": 0.6,
"url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=199837"
}
],
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-202206-2869"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-287",
"trust": 1.0
},
{
"problemtype": "Inappropriate authentication (CWE-287) [NVD evaluation ]",
"trust": 0.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2021-020030"
},
{
"db": "NVD",
"id": "CVE-2021-41506"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.5,
"url": "https://github.com/snawoot/hisilicon-dvr-telnet"
},
{
"trust": 2.5,
"url": "https://github.com/tothi/hs-dvr-telnet"
},
{
"trust": 2.5,
"url": "https://habr.com/en/post/486856/"
},
{
"trust": 2.5,
"url": "https://www.xiongmaitech.com/en/index.php/news/info/12/68"
},
{
"trust": 0.8,
"url": "https://nvd.nist.gov/vuln/detail/cve-2021-41506"
},
{
"trust": 0.6,
"url": "https://cxsecurity.com/cveshow/cve-2021-41506/"
},
{
"trust": 0.1,
"url": "https://ieeexplore.ieee.org/abstract/document/10769424"
},
{
"trust": 0.1,
"url": "https://cwe.mitre.org/data/definitions/522.html"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov"
}
],
"sources": [
{
"db": "OTHER",
"id": null
},
{
"db": "VULMON",
"id": "CVE-2021-41506"
},
{
"db": "JVNDB",
"id": "JVNDB-2021-020030"
},
{
"db": "CNNVD",
"id": "CNNVD-202206-2869"
},
{
"db": "NVD",
"id": "CVE-2021-41506"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "OTHER",
"id": null
},
{
"db": "VULMON",
"id": "CVE-2021-41506"
},
{
"db": "JVNDB",
"id": "JVNDB-2021-020030"
},
{
"db": "CNNVD",
"id": "CNNVD-202206-2869"
},
{
"db": "NVD",
"id": "CVE-2021-41506"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2022-06-30T00:00:00",
"db": "VULMON",
"id": "CVE-2021-41506"
},
{
"date": "2023-09-01T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2021-020030"
},
{
"date": "2022-06-30T00:00:00",
"db": "CNNVD",
"id": "CNNVD-202206-2869"
},
{
"date": "2022-06-30T13:15:08.350000",
"db": "NVD",
"id": "CVE-2021-41506"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2022-07-13T00:00:00",
"db": "VULMON",
"id": "CVE-2021-41506"
},
{
"date": "2023-09-01T08:18:00",
"db": "JVNDB",
"id": "JVNDB-2021-020030"
},
{
"date": "2022-07-14T00:00:00",
"db": "CNNVD",
"id": "CNNVD-202206-2869"
},
{
"date": "2023-08-08T14:22:24.967000",
"db": "NVD",
"id": "CVE-2021-41506"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-202206-2869"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "plural \u00a0xiongmaitech\u00a0 Product certification vulnerabilities",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2021-020030"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "other",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-202206-2869"
}
],
"trust": 0.6
}
}
VAR-201905-0909
Vulnerability from variot - Updated: 2025-01-30 21:03An issue was discovered on XiongMai Besder IP20H1 V4.02.R12.00035520.12012.047500.00200 cameras. An attacker on the same local network as the camera can craft a message with a size field larger than 0x80000000 and send it to the camera, related to an integer overflow or use of a negative number. This then crashes the camera for about 120 seconds. xiongmaitech of besder ip20h1 An integer overflow vulnerability exists in firmware.Service operation interruption (DoS) It may be in a state. XiongMai Besder IP20H1 is an IP camera produced by China XiongMai Technology (XiongMai). An input validation error vulnerability exists in XiongMai Besder IP20H1 4.02.R12.00035520.12012.047500.00200 version. The vulnerability stems from the failure of the network system or product to properly validate the input data
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201905-0909",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "besder ip20h1",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": "4.02.r12.00035520.12012.047500.00200"
},
{
"model": "besder ip20h1",
"scope": "eq",
"trust": 0.8,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "besder ip20h1",
"scope": "eq",
"trust": 0.8,
"vendor": "xiongmaitech",
"version": "besder ip20h1 firmware 4.02.r12.00035520.12012.047500.00200"
},
{
"model": "besder ip20h1",
"scope": null,
"trust": 0.8,
"vendor": "xiongmaitech",
"version": null
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-016861"
},
{
"db": "NVD",
"id": "CVE-2019-11878"
}
]
},
"cve": "CVE-2019-11878",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "ADJACENT_NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "PARTIAL",
"baseScore": 3.3,
"confidentialityImpact": "NONE",
"exploitabilityScore": 6.5,
"id": "CVE-2019-11878",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "LOW",
"trust": 1.8,
"vectorString": "AV:A/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "ADJACENT_NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "PARTIAL",
"baseScore": 3.3,
"confidentialityImpact": "NONE",
"exploitabilityScore": 6.5,
"id": "VHN-143568",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "LOW",
"trust": 0.1,
"vectorString": "AV:A/AC:L/AU:N/C:N/I:N/A:P",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "ADJACENT",
"author": "nvd@nist.gov",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"exploitabilityScore": 2.8,
"id": "CVE-2019-11878",
"impactScore": 3.6,
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.8,
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2019-11878",
"trust": 1.0,
"value": "MEDIUM"
},
{
"author": "NVD",
"id": "CVE-2019-11878",
"trust": 0.8,
"value": "Medium"
},
{
"author": "CNNVD",
"id": "CNNVD-201905-250",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "VULHUB",
"id": "VHN-143568",
"trust": 0.1,
"value": "LOW"
}
]
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-143568"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-016861"
},
{
"db": "CNNVD",
"id": "CNNVD-201905-250"
},
{
"db": "NVD",
"id": "CVE-2019-11878"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "An issue was discovered on XiongMai Besder IP20H1 V4.02.R12.00035520.12012.047500.00200 cameras. An attacker on the same local network as the camera can craft a message with a size field larger than 0x80000000 and send it to the camera, related to an integer overflow or use of a negative number. This then crashes the camera for about 120 seconds. xiongmaitech of besder ip20h1 An integer overflow vulnerability exists in firmware.Service operation interruption (DoS) It may be in a state. XiongMai Besder IP20H1 is an IP camera produced by China XiongMai Technology (XiongMai). An input validation error vulnerability exists in XiongMai Besder IP20H1 4.02.R12.00035520.12012.047500.00200 version. The vulnerability stems from the failure of the network system or product to properly validate the input data",
"sources": [
{
"db": "NVD",
"id": "CVE-2019-11878"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-016861"
},
{
"db": "VULHUB",
"id": "VHN-143568"
}
],
"trust": 1.71
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2019-11878",
"trust": 3.4
},
{
"db": "JVNDB",
"id": "JVNDB-2019-016861",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-201905-250",
"trust": 0.7
},
{
"db": "OTHER",
"id": "NONE",
"trust": 0.1
},
{
"db": "VULHUB",
"id": "VHN-143568",
"trust": 0.1
}
],
"sources": [
{
"db": "OTHER",
"id": null
},
{
"db": "VULHUB",
"id": "VHN-143568"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-016861"
},
{
"db": "CNNVD",
"id": "CNNVD-201905-250"
},
{
"db": "NVD",
"id": "CVE-2019-11878"
}
]
},
"id": "VAR-201905-0909",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "OTHER",
"id": null
},
{
"db": "VULHUB",
"id": "VHN-143568"
}
],
"trust": 0.02
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"camera device"
],
"sub_category": "camera",
"trust": 0.1
}
],
"sources": [
{
"db": "OTHER",
"id": null
}
]
},
"last_update_date": "2025-01-30T21:03:15.407000Z",
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-190",
"trust": 1.1
},
{
"problemtype": "Integer overflow or wraparound (CWE-190) [NVD evaluation ]",
"trust": 0.8
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-143568"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-016861"
},
{
"db": "NVD",
"id": "CVE-2019-11878"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.5,
"url": "http://blog.0x42424242.in/2019/04/besder-investigative-journey-part-1_24.html"
},
{
"trust": 2.5,
"url": "https://www.youtube.com/watch?v=snypjtddmfq"
},
{
"trust": 1.4,
"url": "https://nvd.nist.gov/vuln/detail/cve-2019-11878"
},
{
"trust": 0.1,
"url": "https://ieeexplore.ieee.org/abstract/document/10769424"
}
],
"sources": [
{
"db": "OTHER",
"id": null
},
{
"db": "VULHUB",
"id": "VHN-143568"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-016861"
},
{
"db": "CNNVD",
"id": "CNNVD-201905-250"
},
{
"db": "NVD",
"id": "CVE-2019-11878"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "OTHER",
"id": null
},
{
"db": "VULHUB",
"id": "VHN-143568"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-016861"
},
{
"db": "CNNVD",
"id": "CNNVD-201905-250"
},
{
"db": "NVD",
"id": "CVE-2019-11878"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2019-05-10T00:00:00",
"db": "VULHUB",
"id": "VHN-143568"
},
{
"date": "2024-07-18T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2019-016861"
},
{
"date": "2019-05-10T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201905-250"
},
{
"date": "2019-05-10T15:29:02.667000",
"db": "NVD",
"id": "CVE-2019-11878"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2019-05-13T00:00:00",
"db": "VULHUB",
"id": "VHN-143568"
},
{
"date": "2024-07-18T10:27:00",
"db": "JVNDB",
"id": "JVNDB-2019-016861"
},
{
"date": "2019-05-14T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201905-250"
},
{
"date": "2024-11-21T04:21:56.580000",
"db": "NVD",
"id": "CVE-2019-11878"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote or local",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201905-250"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "xiongmaitech\u00a0 of \u00a0besder\u00a0ip20h1\u00a0 Integer overflow vulnerability in firmware",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-016861"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "input validation error",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201905-250"
}
],
"trust": 0.6
}
}
VAR-201810-0496
Vulnerability from variot - Updated: 2024-11-23 22:12All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server may allow an attacker to use MAC addresses to enumerate potential Cloud IDs. Using this ID, the attacker can discover and connect to valid devices using one of the supported apps. focuses on security monitoring and video intelligence research and development. Multiple security weaknesses 2. Security bypass vulnerability Successfully exploiting these issues allows attackers to perform man-in-the-middle attacks or impersonate trusted servers, bypass the authentication mechanism and gain unauthorized access. This may aid in launching further attacks
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201810-0496",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "xmeye p2p cloud server",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": "*"
},
{
"model": "xmeye p2p cloud server",
"scope": null,
"trust": 0.8,
"vendor": "xiongmai",
"version": null
},
{
"model": "ip cameras",
"scope": null,
"trust": 0.6,
"vendor": "xiongmai information",
"version": null
},
{
"model": "nvrs and dvrs incl. 3rd party oem devices",
"scope": null,
"trust": 0.6,
"vendor": "xiongmai information",
"version": null
},
{
"model": "xmeye p2p cloud server",
"scope": null,
"trust": 0.6,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "xiongmai technology xmeye p2p cloud server",
"scope": "eq",
"trust": 0.3,
"vendor": "",
"version": "0"
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "xmeye p2p cloud server",
"version": "*"
}
],
"sources": [
{
"db": "IVD",
"id": "e2fcf412-39ab-11e9-a6e8-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2018-20454"
},
{
"db": "BID",
"id": "105722"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-011248"
},
{
"db": "CNNVD",
"id": "CNNVD-201810-499"
},
{
"db": "NVD",
"id": "CVE-2018-17917"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/o:xiongmai_technologies:xmeye_p2p_cloud_server",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2018-011248"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Stefan Viehb\u00f6ck on behalf of SEC Consult Vulnerability Lab",
"sources": [
{
"db": "BID",
"id": "105722"
}
],
"trust": 0.3
},
"cve": "CVE-2018-17917",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CVE-2018-17917",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 1.8,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CNVD-2018-20454",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "IVD",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "e2fcf412-39ab-11e9-a6e8-000c29342cb1",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 0.2,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.9 [IVD]"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"exploitabilityScore": 3.9,
"id": "CVE-2018-17917",
"impactScore": 1.4,
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.8,
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2018-17917",
"trust": 1.0,
"value": "MEDIUM"
},
{
"author": "NVD",
"id": "CVE-2018-17917",
"trust": 0.8,
"value": "Medium"
},
{
"author": "CNVD",
"id": "CNVD-2018-20454",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-201810-499",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "IVD",
"id": "e2fcf412-39ab-11e9-a6e8-000c29342cb1",
"trust": 0.2,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "IVD",
"id": "e2fcf412-39ab-11e9-a6e8-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2018-20454"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-011248"
},
{
"db": "CNNVD",
"id": "CNNVD-201810-499"
},
{
"db": "NVD",
"id": "CVE-2018-17917"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server may allow an attacker to use MAC addresses to enumerate potential Cloud IDs. Using this ID, the attacker can discover and connect to valid devices using one of the supported apps. focuses on security monitoring and video intelligence research and development. Multiple security weaknesses\n2. Security bypass vulnerability\nSuccessfully exploiting these issues allows attackers to perform man-in-the-middle attacks or impersonate trusted servers, bypass the authentication mechanism and gain unauthorized access. This may aid in launching further attacks",
"sources": [
{
"db": "NVD",
"id": "CVE-2018-17917"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-011248"
},
{
"db": "CNVD",
"id": "CNVD-2018-20454"
},
{
"db": "BID",
"id": "105722"
},
{
"db": "IVD",
"id": "e2fcf412-39ab-11e9-a6e8-000c29342cb1"
}
],
"trust": 2.61
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2018-17917",
"trust": 3.5
},
{
"db": "ICS CERT",
"id": "ICSA-18-282-06",
"trust": 2.7
},
{
"db": "CNVD",
"id": "CNVD-2018-20454",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-201810-499",
"trust": 0.8
},
{
"db": "JVNDB",
"id": "JVNDB-2018-011248",
"trust": 0.8
},
{
"db": "BID",
"id": "105722",
"trust": 0.3
},
{
"db": "IVD",
"id": "E2FCF412-39AB-11E9-A6E8-000C29342CB1",
"trust": 0.2
}
],
"sources": [
{
"db": "IVD",
"id": "e2fcf412-39ab-11e9-a6e8-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2018-20454"
},
{
"db": "BID",
"id": "105722"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-011248"
},
{
"db": "CNNVD",
"id": "CNNVD-201810-499"
},
{
"db": "NVD",
"id": "CVE-2018-17917"
}
]
},
"id": "VAR-201810-0496",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "IVD",
"id": "e2fcf412-39ab-11e9-a6e8-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2018-20454"
}
],
"trust": 1.8
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"ICS",
"Network device"
],
"sub_category": null,
"trust": 0.6
},
{
"category": [
"ICS"
],
"sub_category": null,
"trust": 0.2
}
],
"sources": [
{
"db": "IVD",
"id": "e2fcf412-39ab-11e9-a6e8-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2018-20454"
}
]
},
"last_update_date": "2024-11-23T22:12:19.187000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Top Page",
"trust": 0.8,
"url": "http://www.xiongmaitech.com/en/"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2018-011248"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-200",
"trust": 1.8
},
{
"problemtype": "CWE-341",
"trust": 1.0
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2018-011248"
},
{
"db": "NVD",
"id": "CVE-2018-17917"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.7,
"url": "https://ics-cert.us-cert.gov/advisories/icsa-18-282-06"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-17917"
},
{
"trust": 0.8,
"url": "https://nvd.nist.gov/vuln/detail/cve-2018-17917"
},
{
"trust": 0.6,
"url": "https://seclists.org/fulldisclosure/2018/oct/22"
},
{
"trust": 0.3,
"url": "https://www.xmeye.net/index"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2018-20454"
},
{
"db": "BID",
"id": "105722"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-011248"
},
{
"db": "CNNVD",
"id": "CNNVD-201810-499"
},
{
"db": "NVD",
"id": "CVE-2018-17917"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "IVD",
"id": "e2fcf412-39ab-11e9-a6e8-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2018-20454"
},
{
"db": "BID",
"id": "105722"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-011248"
},
{
"db": "CNNVD",
"id": "CNNVD-201810-499"
},
{
"db": "NVD",
"id": "CVE-2018-17917"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2018-10-10T00:00:00",
"db": "IVD",
"id": "e2fcf412-39ab-11e9-a6e8-000c29342cb1"
},
{
"date": "2018-10-10T00:00:00",
"db": "CNVD",
"id": "CNVD-2018-20454"
},
{
"date": "2018-10-09T00:00:00",
"db": "BID",
"id": "105722"
},
{
"date": "2019-01-09T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2018-011248"
},
{
"date": "2018-10-11T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201810-499"
},
{
"date": "2018-10-10T15:29:00.363000",
"db": "NVD",
"id": "CVE-2018-17917"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2018-10-10T00:00:00",
"db": "CNVD",
"id": "CNVD-2018-20454"
},
{
"date": "2018-10-09T00:00:00",
"db": "BID",
"id": "105722"
},
{
"date": "2019-01-09T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2018-011248"
},
{
"date": "2019-10-17T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201810-499"
},
{
"date": "2024-11-21T03:55:12.310000",
"db": "NVD",
"id": "CVE-2018-17917"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201810-499"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server Vulnerable to information disclosure",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2018-011248"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "information disclosure",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201810-499"
}
],
"trust": 0.6
}
}
VAR-201810-0495
Vulnerability from variot - Updated: 2024-11-23 22:12All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server do not encrypt all device communication. This includes the XMeye service and firmware update communication. This could allow an attacker to eavesdrop on video feeds, steal XMeye login credentials, or impersonate the update server with malicious update code. Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server Contains a buffer error vulnerability.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. Hangzhou Xiongmai Information Technology Co., Ltd. focuses on security monitoring and video intelligence research and development. Multiple security weaknesses 2. Security bypass vulnerability Successfully exploiting these issues allows attackers to perform man-in-the-middle attacks or impersonate trusted servers, bypass the authentication mechanism and gain unauthorized access. This may aid in launching further attacks
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201810-0495",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "xmeye p2p cloud server",
"scope": "eq",
"trust": 1.6,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "xmeye p2p cloud server",
"scope": null,
"trust": 0.8,
"vendor": "xiongmai",
"version": null
},
{
"model": "ip cameras",
"scope": null,
"trust": 0.6,
"vendor": "xiongmai information",
"version": null
},
{
"model": "nvrs and dvrs incl. 3rd party oem devices",
"scope": null,
"trust": 0.6,
"vendor": "xiongmai information",
"version": null
},
{
"model": "xiongmai technology xmeye p2p cloud server",
"scope": "eq",
"trust": 0.3,
"vendor": "",
"version": "0"
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "xmeye p2p cloud server",
"version": null
}
],
"sources": [
{
"db": "IVD",
"id": "e2fcf411-39ab-11e9-b97b-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2018-20453"
},
{
"db": "BID",
"id": "105722"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-011418"
},
{
"db": "CNNVD",
"id": "CNNVD-201810-498"
},
{
"db": "NVD",
"id": "CVE-2018-17915"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/o:xiongmai_technologies:xmeye_p2p_cloud_server",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2018-011418"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Stefan Viehb\u00f6ck on behalf of SEC Consult Vulnerability Lab",
"sources": [
{
"db": "BID",
"id": "105722"
}
],
"trust": 0.3
},
"cve": "CVE-2018-17915",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 6.4,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CVE-2018-17915",
"impactScore": 4.9,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 1.8,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
{
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "COMPLETE",
"baseScore": 7.6,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 4.9,
"id": "CNVD-2018-20453",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 0.6,
"vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
{
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "IVD",
"availabilityImpact": "COMPLETE",
"baseScore": 7.6,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 4.9,
"id": "e2fcf411-39ab-11e9-b97b-000c29342cb1",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 0.2,
"vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C",
"version": "2.9 [IVD]"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "nvd@nist.gov",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 3.9,
"id": "CVE-2018-17915",
"impactScore": 5.9,
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.8,
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2018-17915",
"trust": 1.0,
"value": "CRITICAL"
},
{
"author": "NVD",
"id": "CVE-2018-17915",
"trust": 0.8,
"value": "Critical"
},
{
"author": "CNVD",
"id": "CNVD-2018-20453",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "CNNVD",
"id": "CNNVD-201810-498",
"trust": 0.6,
"value": "CRITICAL"
},
{
"author": "IVD",
"id": "e2fcf411-39ab-11e9-b97b-000c29342cb1",
"trust": 0.2,
"value": "CRITICAL"
}
]
}
],
"sources": [
{
"db": "IVD",
"id": "e2fcf411-39ab-11e9-b97b-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2018-20453"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-011418"
},
{
"db": "CNNVD",
"id": "CNNVD-201810-498"
},
{
"db": "NVD",
"id": "CVE-2018-17915"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server do not encrypt all device communication. This includes the XMeye service and firmware update communication. This could allow an attacker to eavesdrop on video feeds, steal XMeye login credentials, or impersonate the update server with malicious update code. Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server Contains a buffer error vulnerability.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. Hangzhou Xiongmai Information Technology Co., Ltd. focuses on security monitoring and video intelligence research and development. Multiple security weaknesses\n2. Security bypass vulnerability\nSuccessfully exploiting these issues allows attackers to perform man-in-the-middle attacks or impersonate trusted servers, bypass the authentication mechanism and gain unauthorized access. This may aid in launching further attacks",
"sources": [
{
"db": "NVD",
"id": "CVE-2018-17915"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-011418"
},
{
"db": "CNVD",
"id": "CNVD-2018-20453"
},
{
"db": "BID",
"id": "105722"
},
{
"db": "IVD",
"id": "e2fcf411-39ab-11e9-b97b-000c29342cb1"
}
],
"trust": 2.61
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2018-17915",
"trust": 3.5
},
{
"db": "ICS CERT",
"id": "ICSA-18-282-06",
"trust": 2.7
},
{
"db": "CNVD",
"id": "CNVD-2018-20453",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-201810-498",
"trust": 0.8
},
{
"db": "JVNDB",
"id": "JVNDB-2018-011418",
"trust": 0.8
},
{
"db": "BID",
"id": "105722",
"trust": 0.3
},
{
"db": "IVD",
"id": "E2FCF411-39AB-11E9-B97B-000C29342CB1",
"trust": 0.2
}
],
"sources": [
{
"db": "IVD",
"id": "e2fcf411-39ab-11e9-b97b-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2018-20453"
},
{
"db": "BID",
"id": "105722"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-011418"
},
{
"db": "CNNVD",
"id": "CNNVD-201810-498"
},
{
"db": "NVD",
"id": "CVE-2018-17915"
}
]
},
"id": "VAR-201810-0495",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "IVD",
"id": "e2fcf411-39ab-11e9-b97b-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2018-20453"
}
],
"trust": 1.8
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"ICS",
"Network device"
],
"sub_category": null,
"trust": 0.6
},
{
"category": [
"ICS"
],
"sub_category": null,
"trust": 0.2
}
],
"sources": [
{
"db": "IVD",
"id": "e2fcf411-39ab-11e9-b97b-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2018-20453"
}
]
},
"last_update_date": "2024-11-23T22:12:19.152000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Top Page",
"trust": 0.8,
"url": "http://www.xiongmaitech.com/en/"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2018-011418"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-311",
"trust": 1.0
},
{
"problemtype": "CWE-119",
"trust": 0.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2018-011418"
},
{
"db": "NVD",
"id": "CVE-2018-17915"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.7,
"url": "https://ics-cert.us-cert.gov/advisories/icsa-18-282-06"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-17915"
},
{
"trust": 0.8,
"url": "https://nvd.nist.gov/vuln/detail/cve-2018-17915"
},
{
"trust": 0.6,
"url": "https://seclists.org/fulldisclosure/2018/oct/22"
},
{
"trust": 0.3,
"url": "https://www.xmeye.net/index"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2018-20453"
},
{
"db": "BID",
"id": "105722"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-011418"
},
{
"db": "CNNVD",
"id": "CNNVD-201810-498"
},
{
"db": "NVD",
"id": "CVE-2018-17915"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "IVD",
"id": "e2fcf411-39ab-11e9-b97b-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2018-20453"
},
{
"db": "BID",
"id": "105722"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-011418"
},
{
"db": "CNNVD",
"id": "CNNVD-201810-498"
},
{
"db": "NVD",
"id": "CVE-2018-17915"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2018-10-10T00:00:00",
"db": "IVD",
"id": "e2fcf411-39ab-11e9-b97b-000c29342cb1"
},
{
"date": "2018-10-10T00:00:00",
"db": "CNVD",
"id": "CNVD-2018-20453"
},
{
"date": "2018-10-09T00:00:00",
"db": "BID",
"id": "105722"
},
{
"date": "2019-01-11T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2018-011418"
},
{
"date": "2018-10-11T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201810-498"
},
{
"date": "2018-10-10T15:29:00.253000",
"db": "NVD",
"id": "CVE-2018-17915"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2018-10-10T00:00:00",
"db": "CNVD",
"id": "CNVD-2018-20453"
},
{
"date": "2018-10-09T00:00:00",
"db": "BID",
"id": "105722"
},
{
"date": "2019-01-11T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2018-011418"
},
{
"date": "2019-10-17T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201810-498"
},
{
"date": "2024-11-21T03:55:12.040000",
"db": "NVD",
"id": "CVE-2018-17915"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201810-498"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server Buffer error vulnerability",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2018-011418"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "encryption problem",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201810-498"
}
],
"trust": 0.6
}
}
VAR-201810-0497
Vulnerability from variot - Updated: 2024-11-23 22:12All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server may allow an attacker to use an undocumented user account "default" with its default password to login to XMeye and access/view video streams. Hangzhou Xiongmai Information Technology Co., Ltd. focuses on security monitoring and video intelligence research and development. Multiple security weaknesses 2. Security bypass vulnerability Successfully exploiting these issues allows attackers to perform man-in-the-middle attacks or impersonate trusted servers, bypass the authentication mechanism and gain unauthorized access. This may aid in launching further attacks. XMeye P2P Cloud Server product is vulnerable
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201810-0497",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "xmeye p2p cloud server",
"scope": "eq",
"trust": 1.0,
"vendor": "xiongmaitech",
"version": "*"
},
{
"model": "xmeye p2p cloud server",
"scope": null,
"trust": 0.8,
"vendor": "xiongmai",
"version": null
},
{
"model": "ip cameras",
"scope": null,
"trust": 0.6,
"vendor": "xiongmai information",
"version": null
},
{
"model": "nvrs and dvrs incl. 3rd party oem devices",
"scope": null,
"trust": 0.6,
"vendor": "xiongmai information",
"version": null
},
{
"model": "xmeye p2p cloud server",
"scope": null,
"trust": 0.6,
"vendor": "xiongmaitech",
"version": null
},
{
"model": "xiongmai technology xmeye p2p cloud server",
"scope": "eq",
"trust": 0.3,
"vendor": "",
"version": "0"
},
{
"model": "ip cameras",
"scope": "eq",
"trust": 0.2,
"vendor": "xiongmai information",
"version": "*"
},
{
"model": "nvrs and dvrs incl. 3rd party oem devices",
"scope": "eq",
"trust": 0.2,
"vendor": "xiongmai information",
"version": "*"
}
],
"sources": [
{
"db": "IVD",
"id": "e2fd1b21-39ab-11e9-9d4b-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2018-20455"
},
{
"db": "BID",
"id": "105722"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-011238"
},
{
"db": "CNNVD",
"id": "CNNVD-201810-500"
},
{
"db": "NVD",
"id": "CVE-2018-17919"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/o:xiongmai_technologies:xmeye_p2p_cloud_server",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2018-011238"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Stefan Viehb\u00f6ck on behalf of SEC Consult Vulnerability Lab",
"sources": [
{
"db": "BID",
"id": "105722"
}
],
"trust": 0.3
},
"cve": "CVE-2018-17919",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 6.4,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CVE-2018-17919",
"impactScore": 4.9,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 1.8,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "NONE",
"baseScore": 6.4,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CNVD-2018-20455",
"impactScore": 4.9,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "IVD",
"availabilityImpact": "NONE",
"baseScore": 6.4,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "e2fd1b21-39ab-11e9-9d4b-000c29342cb1",
"impactScore": 4.9,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 0.2,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N",
"version": "2.9 [IVD]"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"exploitabilityScore": 3.9,
"id": "CVE-2018-17919",
"impactScore": 2.5,
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.8,
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2018-17919",
"trust": 1.0,
"value": "MEDIUM"
},
{
"author": "NVD",
"id": "CVE-2018-17919",
"trust": 0.8,
"value": "Medium"
},
{
"author": "CNVD",
"id": "CNVD-2018-20455",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-201810-500",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "IVD",
"id": "e2fd1b21-39ab-11e9-9d4b-000c29342cb1",
"trust": 0.2,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "IVD",
"id": "e2fd1b21-39ab-11e9-9d4b-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2018-20455"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-011238"
},
{
"db": "CNNVD",
"id": "CNNVD-201810-500"
},
{
"db": "NVD",
"id": "CVE-2018-17919"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server may allow an attacker to use an undocumented user account \"default\" with its default password to login to XMeye and access/view video streams. Hangzhou Xiongmai Information Technology Co., Ltd. focuses on security monitoring and video intelligence research and development. Multiple security weaknesses\n2. Security bypass vulnerability\nSuccessfully exploiting these issues allows attackers to perform man-in-the-middle attacks or impersonate trusted servers, bypass the authentication mechanism and gain unauthorized access. This may aid in launching further attacks. \nXMeye P2P Cloud Server product is vulnerable",
"sources": [
{
"db": "NVD",
"id": "CVE-2018-17919"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-011238"
},
{
"db": "CNVD",
"id": "CNVD-2018-20455"
},
{
"db": "BID",
"id": "105722"
},
{
"db": "IVD",
"id": "e2fd1b21-39ab-11e9-9d4b-000c29342cb1"
}
],
"trust": 2.61
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2018-17919",
"trust": 3.5
},
{
"db": "ICS CERT",
"id": "ICSA-18-282-06",
"trust": 2.7
},
{
"db": "CNVD",
"id": "CNVD-2018-20455",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-201810-500",
"trust": 0.8
},
{
"db": "JVNDB",
"id": "JVNDB-2018-011238",
"trust": 0.8
},
{
"db": "BID",
"id": "105722",
"trust": 0.3
},
{
"db": "IVD",
"id": "E2FD1B21-39AB-11E9-9D4B-000C29342CB1",
"trust": 0.2
}
],
"sources": [
{
"db": "IVD",
"id": "e2fd1b21-39ab-11e9-9d4b-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2018-20455"
},
{
"db": "BID",
"id": "105722"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-011238"
},
{
"db": "CNNVD",
"id": "CNNVD-201810-500"
},
{
"db": "NVD",
"id": "CVE-2018-17919"
}
]
},
"id": "VAR-201810-0497",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "IVD",
"id": "e2fd1b21-39ab-11e9-9d4b-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2018-20455"
}
],
"trust": 1.8
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"ICS",
"Network device"
],
"sub_category": null,
"trust": 0.6
},
{
"category": [
"ICS"
],
"sub_category": null,
"trust": 0.2
}
],
"sources": [
{
"db": "IVD",
"id": "e2fd1b21-39ab-11e9-9d4b-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2018-20455"
}
]
},
"last_update_date": "2024-11-23T22:12:19.118000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Top Page",
"trust": 0.8,
"url": "http://www.xiongmaitech.com/en/"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2018-011238"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-798",
"trust": 1.8
},
{
"problemtype": "CWE-912",
"trust": 1.0
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2018-011238"
},
{
"db": "NVD",
"id": "CVE-2018-17919"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.7,
"url": "https://ics-cert.us-cert.gov/advisories/icsa-18-282-06"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-17919"
},
{
"trust": 0.8,
"url": "https://nvd.nist.gov/vuln/detail/cve-2018-17919"
},
{
"trust": 0.6,
"url": "https://seclists.org/fulldisclosure/2018/oct/22"
},
{
"trust": 0.3,
"url": "https://www.xmeye.net/index"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2018-20455"
},
{
"db": "BID",
"id": "105722"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-011238"
},
{
"db": "CNNVD",
"id": "CNNVD-201810-500"
},
{
"db": "NVD",
"id": "CVE-2018-17919"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "IVD",
"id": "e2fd1b21-39ab-11e9-9d4b-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2018-20455"
},
{
"db": "BID",
"id": "105722"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-011238"
},
{
"db": "CNNVD",
"id": "CNNVD-201810-500"
},
{
"db": "NVD",
"id": "CVE-2018-17919"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2018-10-10T00:00:00",
"db": "IVD",
"id": "e2fd1b21-39ab-11e9-9d4b-000c29342cb1"
},
{
"date": "2018-10-10T00:00:00",
"db": "CNVD",
"id": "CNVD-2018-20455"
},
{
"date": "2018-10-09T00:00:00",
"db": "BID",
"id": "105722"
},
{
"date": "2019-01-09T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2018-011238"
},
{
"date": "2018-10-11T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201810-500"
},
{
"date": "2018-10-10T15:29:00.487000",
"db": "NVD",
"id": "CVE-2018-17919"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2018-10-10T00:00:00",
"db": "CNVD",
"id": "CNVD-2018-20455"
},
{
"date": "2018-10-09T00:00:00",
"db": "BID",
"id": "105722"
},
{
"date": "2019-01-09T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2018-011238"
},
{
"date": "2019-10-17T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201810-500"
},
{
"date": "2024-11-21T03:55:12.570000",
"db": "NVD",
"id": "CVE-2018-17919"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201810-500"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server Vulnerabilities related to the use of hard-coded credentials",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2018-011238"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "trust management problem",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201810-500"
}
],
"trust": 0.6
}
}
CVE-2018-17919 (GCVE-0-2018-17919)
Vulnerability from nvd – Published: 2018-10-10 15:00 – Updated: 2024-09-16 18:03
VLAI
EPSS
VEX
Summary
All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server may allow an attacker to use an undocumented user account "default" with its default password to login to XMeye and access/view video streams.
Severity
No CVSS data available.
CWE
- CWE-912 - HIDDEN FUNCTIONALITY CWE-912
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06 | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Hangzhou Xiongmai Technology Co., Ltd | XMeye P2P Cloud Server |
Affected:
All versions
|
Date Public
2018-10-09 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T11:01:14.661Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "XMeye P2P Cloud Server",
"vendor": "Hangzhou Xiongmai Technology Co., Ltd",
"versions": [
{
"status": "affected",
"version": "All versions"
}
]
}
],
"datePublic": "2018-10-09T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server may allow an attacker to use an undocumented user account \"default\" with its default password to login to XMeye and access/view video streams."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-912",
"description": "HIDDEN FUNCTIONALITY CWE-912",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-10T14:57:01.000Z",
"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"shortName": "icscert"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "ics-cert@hq.dhs.gov",
"DATE_PUBLIC": "2018-10-09T00:00:00",
"ID": "CVE-2018-17919",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "XMeye P2P Cloud Server",
"version": {
"version_data": [
{
"version_value": "All versions"
}
]
}
}
]
},
"vendor_name": "Hangzhou Xiongmai Technology Co., Ltd"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server may allow an attacker to use an undocumented user account \"default\" with its default password to login to XMeye and access/view video streams."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "HIDDEN FUNCTIONALITY CWE-912"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06",
"refsource": "MISC",
"url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"assignerShortName": "icscert",
"cveId": "CVE-2018-17919",
"datePublished": "2018-10-10T15:00:00.000Z",
"dateReserved": "2018-10-02T00:00:00.000Z",
"dateUpdated": "2024-09-16T18:03:48.747Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2018-17917 (GCVE-0-2018-17917)
Vulnerability from nvd – Published: 2018-10-10 15:00 – Updated: 2024-09-16 17:59
VLAI
EPSS
VEX
Summary
All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server may allow an attacker to use MAC addresses to enumerate potential Cloud IDs. Using this ID, the attacker can discover and connect to valid devices using one of the supported apps.
Severity
No CVSS data available.
CWE
- CWE-341 - PREDICTABLE FROM OBSERVABLE STATE CWE-341
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06 | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Hangzhou Xiongmai Technology Co., Ltd | XMeye P2P Cloud Server |
Affected:
All versions
|
Date Public
2018-10-09 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T11:01:14.674Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "XMeye P2P Cloud Server",
"vendor": "Hangzhou Xiongmai Technology Co., Ltd",
"versions": [
{
"status": "affected",
"version": "All versions"
}
]
}
],
"datePublic": "2018-10-09T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server may allow an attacker to use MAC addresses to enumerate potential Cloud IDs. Using this ID, the attacker can discover and connect to valid devices using one of the supported apps."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-341",
"description": "PREDICTABLE FROM OBSERVABLE STATE CWE-341",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-10T14:57:01.000Z",
"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"shortName": "icscert"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "ics-cert@hq.dhs.gov",
"DATE_PUBLIC": "2018-10-09T00:00:00",
"ID": "CVE-2018-17917",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "XMeye P2P Cloud Server",
"version": {
"version_data": [
{
"version_value": "All versions"
}
]
}
}
]
},
"vendor_name": "Hangzhou Xiongmai Technology Co., Ltd"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server may allow an attacker to use MAC addresses to enumerate potential Cloud IDs. Using this ID, the attacker can discover and connect to valid devices using one of the supported apps."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "PREDICTABLE FROM OBSERVABLE STATE CWE-341"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06",
"refsource": "MISC",
"url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"assignerShortName": "icscert",
"cveId": "CVE-2018-17917",
"datePublished": "2018-10-10T15:00:00.000Z",
"dateReserved": "2018-10-02T00:00:00.000Z",
"dateUpdated": "2024-09-16T17:59:25.518Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2018-17915 (GCVE-0-2018-17915)
Vulnerability from nvd – Published: 2018-10-10 15:00 – Updated: 2024-09-16 22:56
VLAI
EPSS
VEX
Summary
All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server do not encrypt all device communication. This includes the XMeye service and firmware update communication. This could allow an attacker to eavesdrop on video feeds, steal XMeye login credentials, or impersonate the update server with malicious update code.
Severity
No CVSS data available.
CWE
- CWE-311 - MISSING ENCRYPTION OF SENSITIVE DATA CWE-311
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06 | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Hangzhou Xiongmai Technology Co., Ltd | XMeye P2P Cloud Server |
Affected:
All versions
|
Date Public
2018-10-09 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T11:01:14.678Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "XMeye P2P Cloud Server",
"vendor": "Hangzhou Xiongmai Technology Co., Ltd",
"versions": [
{
"status": "affected",
"version": "All versions"
}
]
}
],
"datePublic": "2018-10-09T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server do not encrypt all device communication. This includes the XMeye service and firmware update communication. This could allow an attacker to eavesdrop on video feeds, steal XMeye login credentials, or impersonate the update server with malicious update code."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-311",
"description": "MISSING ENCRYPTION OF SENSITIVE DATA CWE-311",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-10T14:57:01.000Z",
"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"shortName": "icscert"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "ics-cert@hq.dhs.gov",
"DATE_PUBLIC": "2018-10-09T00:00:00",
"ID": "CVE-2018-17915",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "XMeye P2P Cloud Server",
"version": {
"version_data": [
{
"version_value": "All versions"
}
]
}
}
]
},
"vendor_name": "Hangzhou Xiongmai Technology Co., Ltd"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server do not encrypt all device communication. This includes the XMeye service and firmware update communication. This could allow an attacker to eavesdrop on video feeds, steal XMeye login credentials, or impersonate the update server with malicious update code."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "MISSING ENCRYPTION OF SENSITIVE DATA CWE-311"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06",
"refsource": "MISC",
"url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"assignerShortName": "icscert",
"cveId": "CVE-2018-17915",
"datePublished": "2018-10-10T15:00:00.000Z",
"dateReserved": "2018-10-02T00:00:00.000Z",
"dateUpdated": "2024-09-16T22:56:29.656Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2018-10088 (GCVE-0-2018-10088)
Vulnerability from nvd – Published: 2018-06-08 12:00 – Updated: 2024-08-05 07:32
VLAI
EPSS
VEX
Summary
Buffer overflow in XiongMai uc-httpd 1.0.0 has unspecified impact and attack vectors, a different vulnerability than CVE-2017-16725.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://github.com/bitfu/uc-httpd-1.0.0-buffer-ov… | x_refsource_MISC |
| https://www.exploit-db.com/exploits/44864/ | exploitx_refsource_EXPLOIT-DB |
Date Public
2018-06-08 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T07:32:00.908Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/bitfu/uc-httpd-1.0.0-buffer-overflow-exploit"
},
{
"name": "44864",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB",
"x_transferred"
],
"url": "https://www.exploit-db.com/exploits/44864/"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2018-06-08T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Buffer overflow in XiongMai uc-httpd 1.0.0 has unspecified impact and attack vectors, a different vulnerability than CVE-2017-16725."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-06-10T09:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/bitfu/uc-httpd-1.0.0-buffer-overflow-exploit"
},
{
"name": "44864",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB"
],
"url": "https://www.exploit-db.com/exploits/44864/"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2018-10088",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Buffer overflow in XiongMai uc-httpd 1.0.0 has unspecified impact and attack vectors, a different vulnerability than CVE-2017-16725."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://github.com/bitfu/uc-httpd-1.0.0-buffer-overflow-exploit",
"refsource": "MISC",
"url": "https://github.com/bitfu/uc-httpd-1.0.0-buffer-overflow-exploit"
},
{
"name": "44864",
"refsource": "EXPLOIT-DB",
"url": "https://www.exploit-db.com/exploits/44864/"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2018-10088",
"datePublished": "2018-06-08T12:00:00.000Z",
"dateReserved": "2018-04-13T00:00:00.000Z",
"dateUpdated": "2024-08-05T07:32:00.908Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2017-7577 (GCVE-0-2017-7577)
Vulnerability from nvd – Published: 2017-04-07 04:33 – Updated: 2024-08-05 16:04
VLAI
EPSS
VEX
Summary
XiongMai uc-httpd has directory traversal allowing the reading of arbitrary files via a "GET ../" HTTP request.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
1 reference
| URL | Tags |
|---|---|
| http://zeroday.insecurity.zone/exploits/uc-httpd_… | x_refsource_MISC |
Date Public
2017-04-06 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T16:04:12.111Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://zeroday.insecurity.zone/exploits/uc-httpd_lfi.txt"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2017-04-06T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "XiongMai uc-httpd has directory traversal allowing the reading of arbitrary files via a \"GET ../\" HTTP request."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-04-07T04:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "http://zeroday.insecurity.zone/exploits/uc-httpd_lfi.txt"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2017-7577",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "XiongMai uc-httpd has directory traversal allowing the reading of arbitrary files via a \"GET ../\" HTTP request."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://zeroday.insecurity.zone/exploits/uc-httpd_lfi.txt",
"refsource": "MISC",
"url": "http://zeroday.insecurity.zone/exploits/uc-httpd_lfi.txt"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2017-7577",
"datePublished": "2017-04-07T04:33:00.000Z",
"dateReserved": "2017-04-06T00:00:00.000Z",
"dateUpdated": "2024-08-05T16:04:12.111Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2018-17915 (GCVE-0-2018-17915)
Vulnerability from cvelistv5 – Published: 2018-10-10 15:00 – Updated: 2024-09-16 22:56
VLAI
EPSS
VEX
Summary
All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server do not encrypt all device communication. This includes the XMeye service and firmware update communication. This could allow an attacker to eavesdrop on video feeds, steal XMeye login credentials, or impersonate the update server with malicious update code.
Severity
No CVSS data available.
CWE
- CWE-311 - MISSING ENCRYPTION OF SENSITIVE DATA CWE-311
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06 | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Hangzhou Xiongmai Technology Co., Ltd | XMeye P2P Cloud Server |
Affected:
All versions
|
Date Public
2018-10-09 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T11:01:14.678Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "XMeye P2P Cloud Server",
"vendor": "Hangzhou Xiongmai Technology Co., Ltd",
"versions": [
{
"status": "affected",
"version": "All versions"
}
]
}
],
"datePublic": "2018-10-09T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server do not encrypt all device communication. This includes the XMeye service and firmware update communication. This could allow an attacker to eavesdrop on video feeds, steal XMeye login credentials, or impersonate the update server with malicious update code."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-311",
"description": "MISSING ENCRYPTION OF SENSITIVE DATA CWE-311",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-10T14:57:01.000Z",
"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"shortName": "icscert"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "ics-cert@hq.dhs.gov",
"DATE_PUBLIC": "2018-10-09T00:00:00",
"ID": "CVE-2018-17915",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "XMeye P2P Cloud Server",
"version": {
"version_data": [
{
"version_value": "All versions"
}
]
}
}
]
},
"vendor_name": "Hangzhou Xiongmai Technology Co., Ltd"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server do not encrypt all device communication. This includes the XMeye service and firmware update communication. This could allow an attacker to eavesdrop on video feeds, steal XMeye login credentials, or impersonate the update server with malicious update code."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "MISSING ENCRYPTION OF SENSITIVE DATA CWE-311"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06",
"refsource": "MISC",
"url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"assignerShortName": "icscert",
"cveId": "CVE-2018-17915",
"datePublished": "2018-10-10T15:00:00.000Z",
"dateReserved": "2018-10-02T00:00:00.000Z",
"dateUpdated": "2024-09-16T22:56:29.656Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2018-17919 (GCVE-0-2018-17919)
Vulnerability from cvelistv5 – Published: 2018-10-10 15:00 – Updated: 2024-09-16 18:03
VLAI
EPSS
VEX
Summary
All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server may allow an attacker to use an undocumented user account "default" with its default password to login to XMeye and access/view video streams.
Severity
No CVSS data available.
CWE
- CWE-912 - HIDDEN FUNCTIONALITY CWE-912
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06 | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Hangzhou Xiongmai Technology Co., Ltd | XMeye P2P Cloud Server |
Affected:
All versions
|
Date Public
2018-10-09 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T11:01:14.661Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "XMeye P2P Cloud Server",
"vendor": "Hangzhou Xiongmai Technology Co., Ltd",
"versions": [
{
"status": "affected",
"version": "All versions"
}
]
}
],
"datePublic": "2018-10-09T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server may allow an attacker to use an undocumented user account \"default\" with its default password to login to XMeye and access/view video streams."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-912",
"description": "HIDDEN FUNCTIONALITY CWE-912",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-10T14:57:01.000Z",
"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"shortName": "icscert"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "ics-cert@hq.dhs.gov",
"DATE_PUBLIC": "2018-10-09T00:00:00",
"ID": "CVE-2018-17919",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "XMeye P2P Cloud Server",
"version": {
"version_data": [
{
"version_value": "All versions"
}
]
}
}
]
},
"vendor_name": "Hangzhou Xiongmai Technology Co., Ltd"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server may allow an attacker to use an undocumented user account \"default\" with its default password to login to XMeye and access/view video streams."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "HIDDEN FUNCTIONALITY CWE-912"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06",
"refsource": "MISC",
"url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"assignerShortName": "icscert",
"cveId": "CVE-2018-17919",
"datePublished": "2018-10-10T15:00:00.000Z",
"dateReserved": "2018-10-02T00:00:00.000Z",
"dateUpdated": "2024-09-16T18:03:48.747Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2018-17917 (GCVE-0-2018-17917)
Vulnerability from cvelistv5 – Published: 2018-10-10 15:00 – Updated: 2024-09-16 17:59
VLAI
EPSS
VEX
Summary
All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server may allow an attacker to use MAC addresses to enumerate potential Cloud IDs. Using this ID, the attacker can discover and connect to valid devices using one of the supported apps.
Severity
No CVSS data available.
CWE
- CWE-341 - PREDICTABLE FROM OBSERVABLE STATE CWE-341
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06 | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Hangzhou Xiongmai Technology Co., Ltd | XMeye P2P Cloud Server |
Affected:
All versions
|
Date Public
2018-10-09 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T11:01:14.674Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "XMeye P2P Cloud Server",
"vendor": "Hangzhou Xiongmai Technology Co., Ltd",
"versions": [
{
"status": "affected",
"version": "All versions"
}
]
}
],
"datePublic": "2018-10-09T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server may allow an attacker to use MAC addresses to enumerate potential Cloud IDs. Using this ID, the attacker can discover and connect to valid devices using one of the supported apps."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-341",
"description": "PREDICTABLE FROM OBSERVABLE STATE CWE-341",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-10T14:57:01.000Z",
"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"shortName": "icscert"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "ics-cert@hq.dhs.gov",
"DATE_PUBLIC": "2018-10-09T00:00:00",
"ID": "CVE-2018-17917",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "XMeye P2P Cloud Server",
"version": {
"version_data": [
{
"version_value": "All versions"
}
]
}
}
]
},
"vendor_name": "Hangzhou Xiongmai Technology Co., Ltd"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server may allow an attacker to use MAC addresses to enumerate potential Cloud IDs. Using this ID, the attacker can discover and connect to valid devices using one of the supported apps."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "PREDICTABLE FROM OBSERVABLE STATE CWE-341"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06",
"refsource": "MISC",
"url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"assignerShortName": "icscert",
"cveId": "CVE-2018-17917",
"datePublished": "2018-10-10T15:00:00.000Z",
"dateReserved": "2018-10-02T00:00:00.000Z",
"dateUpdated": "2024-09-16T17:59:25.518Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2018-10088 (GCVE-0-2018-10088)
Vulnerability from cvelistv5 – Published: 2018-06-08 12:00 – Updated: 2024-08-05 07:32
VLAI
EPSS
VEX
Summary
Buffer overflow in XiongMai uc-httpd 1.0.0 has unspecified impact and attack vectors, a different vulnerability than CVE-2017-16725.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://github.com/bitfu/uc-httpd-1.0.0-buffer-ov… | x_refsource_MISC |
| https://www.exploit-db.com/exploits/44864/ | exploitx_refsource_EXPLOIT-DB |
Date Public
2018-06-08 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T07:32:00.908Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/bitfu/uc-httpd-1.0.0-buffer-overflow-exploit"
},
{
"name": "44864",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB",
"x_transferred"
],
"url": "https://www.exploit-db.com/exploits/44864/"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2018-06-08T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Buffer overflow in XiongMai uc-httpd 1.0.0 has unspecified impact and attack vectors, a different vulnerability than CVE-2017-16725."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-06-10T09:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/bitfu/uc-httpd-1.0.0-buffer-overflow-exploit"
},
{
"name": "44864",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB"
],
"url": "https://www.exploit-db.com/exploits/44864/"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2018-10088",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Buffer overflow in XiongMai uc-httpd 1.0.0 has unspecified impact and attack vectors, a different vulnerability than CVE-2017-16725."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://github.com/bitfu/uc-httpd-1.0.0-buffer-overflow-exploit",
"refsource": "MISC",
"url": "https://github.com/bitfu/uc-httpd-1.0.0-buffer-overflow-exploit"
},
{
"name": "44864",
"refsource": "EXPLOIT-DB",
"url": "https://www.exploit-db.com/exploits/44864/"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2018-10088",
"datePublished": "2018-06-08T12:00:00.000Z",
"dateReserved": "2018-04-13T00:00:00.000Z",
"dateUpdated": "2024-08-05T07:32:00.908Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2017-7577 (GCVE-0-2017-7577)
Vulnerability from cvelistv5 – Published: 2017-04-07 04:33 – Updated: 2024-08-05 16:04
VLAI
EPSS
VEX
Summary
XiongMai uc-httpd has directory traversal allowing the reading of arbitrary files via a "GET ../" HTTP request.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
1 reference
| URL | Tags |
|---|---|
| http://zeroday.insecurity.zone/exploits/uc-httpd_… | x_refsource_MISC |
Date Public
2017-04-06 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T16:04:12.111Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://zeroday.insecurity.zone/exploits/uc-httpd_lfi.txt"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2017-04-06T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "XiongMai uc-httpd has directory traversal allowing the reading of arbitrary files via a \"GET ../\" HTTP request."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-04-07T04:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "http://zeroday.insecurity.zone/exploits/uc-httpd_lfi.txt"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2017-7577",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "XiongMai uc-httpd has directory traversal allowing the reading of arbitrary files via a \"GET ../\" HTTP request."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://zeroday.insecurity.zone/exploits/uc-httpd_lfi.txt",
"refsource": "MISC",
"url": "http://zeroday.insecurity.zone/exploits/uc-httpd_lfi.txt"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2017-7577",
"datePublished": "2017-04-07T04:33:00.000Z",
"dateReserved": "2017-04-06T00:00:00.000Z",
"dateUpdated": "2024-08-05T16:04:12.111Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}