{"id":"01M6MYE3NRN9DYBECKW2DJ55YW","slug":"xmeye-based-cameras-and-nvrs","vendor":null,"oem":"Hangzhou Xiongmai Technology","model":"XMEye-based cameras and NVRs","hw_revision":null,"category":"ip_camera","country_of_origin":"CN","description":"White-label cameras/DVRs built on Xiongmai boards using the XMEye P2P cloud. SEC Consult (2018) found default admin credentials, predictable cloud IDs and an unsigned firmware update path.","status":"confirmed","status_reason":"SEC Consult disclosure and ICS-CERT advisory, Oct 2018","status_at":1793853871964,"status_manual":1,"report_count":1,"verified_count":1,"created_by":"01M6MYDMJ4H4JTJ0TK8JWT1E1B","created_at":1793851854520,"updated_at":1793853871964,"url":"https://isitspying.com/p/xmeye-based-cameras-and-nvrs","badge":"https://isitspying.com/badge/xmeye-based-cameras-and-nvrs.svg","identifiers":[{"kind":"bt_name","value":"XMEye","product_id":"01M6MYE3NRN9DYBECKW2DJ55YW","confidence":1,"source":"seed","created_at":1793851854777},{"kind":"cve","value":"CVE-2018-17915","product_id":"01M6MYE3NRN9DYBECKW2DJ55YW","confidence":1,"source":"seed","created_at":1793851854632},{"kind":"cve","value":"CVE-2018-17917","product_id":"01M6MYE3NRN9DYBECKW2DJ55YW","confidence":1,"source":"seed","created_at":1793851854683},{"kind":"cve","value":"CVE-2018-17919","product_id":"01M6MYE3NRN9DYBECKW2DJ55YW","confidence":1,"source":"seed","created_at":1793851854728}],"findings":[{"kind":"hardcoded_credentials","severity":"critical","n":1,"verified_n":1},{"kind":"known_cve","severity":"high","n":1,"verified_n":1}],"contacted_hosts":[],"reports":[{"id":"01M6MYE45CN8QXDSKZ38GA6D3P","url":"https://isitspying.com/r/01M6MYE45CN8QXDSKZ38GA6D3P","status":"verified","verdict":"vulnerable","summary":"Default admin password, sequential cloud IDs and unsigned firmware updates over XMEye P2P (SEC Consult, 2018; ICS-CERT advisory)","method":"firmware_dump","channel":"api","handle":"isitspying","created_at":1793851855020}],"responses":[],"sources":[{"id":"01M6MYE406MT21YCWXYJC1A0D4","product_id":"01M6MYE3NRN9DYBECKW2DJ55YW","report_id":null,"title":"CVE-2018-17917","url":"https://nvd.nist.gov/vuln/detail/CVE-2018-17917","publisher":"NVD","published_at":"2018-10-23","created_at":1793851854854},{"id":"01M6MYE42Q94TZJANCHBP4QTZF","product_id":"01M6MYE3NRN9DYBECKW2DJ55YW","report_id":null,"title":"Millions of Xiongmai video surveillance devices can be hacked via cloud feature (XMEye P2P Cloud)","url":"https://sec-consult.com/blog/detail/millions-of-xiongmai-video-surveillance-devices-can-be-hacked-via-cloud-feature-xmeye-p2p-cloud/","publisher":"SEC Consult","published_at":"2018-10-09","created_at":1793851854935}]}