Find a vulnerability

Search criteria

Vendor

Product

Assigner (CNA or root)

Sources

Sort by

Order

CVSS min

CVSS max

Apply ordering (override relevance)

12 vulnerabilities by xiongmaitech

CVE-2024-3765 (GCVE-0-2024-3765)

Vulnerability from nvd – Published: 2024-04-14 23:00 – Updated: 2024-08-08 20:19

Title

Xiongmai AHB7804R-MH-V2 Sofia Service access control

Summary

A vulnerability classified as critical was found in Xiongmai AHB7804R-MH-V2, AHB8004T-GL, AHB8008T-GL, AHB7004T-GS-V3, AHB7004T-MHV2, AHB8032F-LME and XM530_R80X30-PQ_8M. Affected by this vulnerability is an unknown functionality of the component Sofia Service. The manipulation with the input ff00000000000000000000000000f103250000007b202252657422203a203130302c202253657373696f6e494422203a202230783022207d0a leads to improper access controls. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-260605 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Severity

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.8 (Critical)


                        
                          CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: poc Automatable: yes Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-04-15 13:40 UTC

CWE

CWE-284 - Improper Access Controls

Assigner

VulDB mitre root Scorecard

References

5 references

URL	Tags
https://vuldb.com/?id.260605	vdb-entrytechnical-descriptionmitigation
https://vuldb.com/?ctiid.260605	signaturepermissions-required
https://vuldb.com/?submit.311903	third-party-advisory
https://github.com/netsecfish/xiongmai_incorrect_…	related
https://github.com/netsecfish/xiongmai_incorrect_…	exploit

Impacted products

56 products

Vendor	Product	Version
Xiongmai	AHB7804R-MH-V2	Affected: 4.02.R11.24340142.10001.131900.00000 Affected: 4.02.R11.A8531149.10001.131900.00000 Affected: 4.02.R11.C6380171.11201.141900.00000 Affected: 4.03.R11.0000020X.11201.042300.0000005 Affected: 4.03.R11.4912720B.11201.142300.0000004 Affected: 4.03.R11.4912720D.11201.142300.0000004 Affected: 4.03.R11.4915714A.12201.142300.0000000 Affected: 5.00.R02.00030751.10010.348717.0000000
Xiongmai	AHB8004T-GL	Affected: 4.02.R11.24340142.10001.131900.00000 Affected: 4.02.R11.A8531149.10001.131900.00000 Affected: 4.02.R11.C6380171.11201.141900.00000 Affected: 4.03.R11.0000020X.11201.042300.0000005 Affected: 4.03.R11.4912720B.11201.142300.0000004 Affected: 4.03.R11.4912720D.11201.142300.0000004 Affected: 4.03.R11.4915714A.12201.142300.0000000 Affected: 5.00.R02.00030751.10010.348717.0000000
Xiongmai	AHB8008T-GL	Affected: 4.02.R11.24340142.10001.131900.00000 Affected: 4.02.R11.A8531149.10001.131900.00000 Affected: 4.02.R11.C6380171.11201.141900.00000 Affected: 4.03.R11.0000020X.11201.042300.0000005 Affected: 4.03.R11.4912720B.11201.142300.0000004 Affected: 4.03.R11.4912720D.11201.142300.0000004 Affected: 4.03.R11.4915714A.12201.142300.0000000 Affected: 5.00.R02.00030751.10010.348717.0000000
Xiongmai	AHB7004T-GS-V3	Affected: 4.02.R11.24340142.10001.131900.00000 Affected: 4.02.R11.A8531149.10001.131900.00000 Affected: 4.02.R11.C6380171.11201.141900.00000 Affected: 4.03.R11.0000020X.11201.042300.0000005 Affected: 4.03.R11.4912720B.11201.142300.0000004 Affected: 4.03.R11.4912720D.11201.142300.0000004 Affected: 4.03.R11.4915714A.12201.142300.0000000 Affected: 5.00.R02.00030751.10010.348717.0000000
Xiongmai	AHB7004T-MHV2	Affected: 4.02.R11.24340142.10001.131900.00000 Affected: 4.02.R11.A8531149.10001.131900.00000 Affected: 4.02.R11.C6380171.11201.141900.00000 Affected: 4.03.R11.0000020X.11201.042300.0000005 Affected: 4.03.R11.4912720B.11201.142300.0000004 Affected: 4.03.R11.4912720D.11201.142300.0000004 Affected: 4.03.R11.4915714A.12201.142300.0000000 Affected: 5.00.R02.00030751.10010.348717.0000000
Xiongmai	AHB8032F-LME	Affected: 4.02.R11.24340142.10001.131900.00000 Affected: 4.02.R11.A8531149.10001.131900.00000 Affected: 4.02.R11.C6380171.11201.141900.00000 Affected: 4.03.R11.0000020X.11201.042300.0000005 Affected: 4.03.R11.4912720B.11201.142300.0000004 Affected: 4.03.R11.4912720D.11201.142300.0000004 Affected: 4.03.R11.4915714A.12201.142300.0000000 Affected: 5.00.R02.00030751.10010.348717.0000000
Xiongmai	XM530_R80X30-PQ_8M	Affected: 4.02.R11.24340142.10001.131900.00000 Affected: 4.02.R11.A8531149.10001.131900.00000 Affected: 4.02.R11.C6380171.11201.141900.00000 Affected: 4.03.R11.0000020X.11201.042300.0000005 Affected: 4.03.R11.4912720B.11201.142300.0000004 Affected: 4.03.R11.4912720D.11201.142300.0000004 Affected: 4.03.R11.4915714A.12201.142300.0000000 Affected: 5.00.R02.00030751.10010.348717.0000000
xiongmaitech	ahb7804r-mh-v2_firmware	Affected: 4.02.r11.24340142.10001.131900.00000 Affected: 4.02.r11.a8531149.10001.131900.00000 Affected: 4.02.r11.c6380171.11201.141900.00000 Affected: 4.03.r11.0000020x.11201.042300.0000005 Affected: 4.03.r11.4912720b.11201.142300.0000004 Affected: 4.03.r11.4912720d.11201.142300.0000004 Affected: 4.03.r11.4915714a.12201.142300.0000000 Affected: 5.00.r02.00030751.10010.348717.0000000 cpe:2.3:o:xiongmaitech:ahb7804r-mh-v2_firmware:4.02.r11.24340142.10001.131900.00000:::::::* cpe:2.3:o:xiongmaitech:ahb7804r-mh-v2_firmware:4.02.r11.a8531149.10001.131900.00000:::::::* cpe:2.3:o:xiongmaitech:ahb7804r-mh-v2_firmware:4.02.r11.c6380171.11201.141900.00000:::::::* cpe:2.3:o:xiongmaitech:ahb7804r-mh-v2_firmware:4.03.r11.0000020x.11201.042300.0000005:::::::* cpe:2.3:o:xiongmaitech:ahb7804r-mh-v2_firmware:4.03.r11.4912720b.11201.142300.0000004:::::::* cpe:2.3:o:xiongmaitech:ahb7804r-mh-v2_firmware:4.03.r11.4912720d.11201.142300.0000004:::::::* cpe:2.3:o:xiongmaitech:ahb7804r-mh-v2_firmware:4.03.r11.4915714a.12201.142300.0000000:::::::* cpe:2.3:o:xiongmaitech:ahb7804r-mh-v2_firmware:5.00.r02.00030751.10010.348717.0000000:::::::*
xiongmaitech	ahb8008t-gl_firmware	Affected: 4.03.r11.4915714a.12201.142300.0000000 cpe:2.3:o:xiongmaitech:ahb8008t-gl_firmware:4.03.r11.4915714a.12201.142300.0000000:::::::*
xiongmaitech	ahb8008t-gl_firmware	Affected: 4.02.r11.a8531149.10001.131900.00000 cpe:2.3:o:xiongmaitech:ahb8008t-gl_firmware:4.02.r11.a8531149.10001.131900.00000:::::::*
xiongmaitech	ahb8008t-gl_firmware	Affected: 4.03.r11.4912720b.11201.142300.0000004 cpe:2.3:o:xiongmaitech:ahb8008t-gl_firmware:4.03.r11.4912720b.11201.142300.0000004:::::::*
xiongmaitech	ahb8008t-gl_firmware	Affected: 4.03.r11.4912720d.11201.142300.0000004 cpe:2.3:o:xiongmaitech:ahb8008t-gl_firmware:4.03.r11.4912720d.11201.142300.0000004:::::::*
xiongmaitech	ahb8008t-gl_firmware	Affected: 5.00.r02.00030751.10010.348717.0000000 cpe:2.3:o:xiongmaitech:ahb8008t-gl_firmware:5.00.r02.00030751.10010.348717.0000000:::::::*
xiongmaitech	ahb8008t-gl_firmware	Affected: 4.02.r11.c6380171.11201.141900.00000 cpe:2.3:o:xiongmaitech:ahb8008t-gl_firmware:4.02.r11.c6380171.11201.141900.00000:::::::*
xiongmaitech	ahb8008t-gl_firmware	Affected: 4.03.r11.0000020x.11201.042300.0000005 cpe:2.3:o:xiongmaitech:ahb8008t-gl_firmware:4.03.r11.0000020x.11201.042300.0000005:::::::*
xiongmaitech	ahb8008t-gl_firmware	Affected: 4.02.r11.24340142.10001.131900.00000 cpe:2.3:o:xiongmaitech:ahb8008t-gl_firmware:4.02.r11.24340142.10001.131900.00000:::::::*
xiongmaitech	ahb8004t-gl_firmware	Affected: 4.03.r11.4915714a.12201.142300.0000000 cpe:2.3:o:xiongmaitech:ahb8004t-gl_firmware:4.03.r11.4915714a.12201.142300.0000000:::::::*
xiongmaitech	ahb8004t-gl_firmware	Affected: 4.02.r11.a8531149.10001.131900.00000 cpe:2.3:o:xiongmaitech:ahb8004t-gl_firmware:4.02.r11.a8531149.10001.131900.00000:::::::*
xiongmaitech	ahb8004t-gl_firmware	Affected: 4.03.r11.4912720b.11201.142300.0000004 cpe:2.3:o:xiongmaitech:ahb8004t-gl_firmware:4.03.r11.4912720b.11201.142300.0000004:::::::*
xiongmaitech	ahb8004t-gl_firmware	Affected: 4.03.r11.4912720d.11201.142300.0000004 cpe:2.3:o:xiongmaitech:ahb8004t-gl_firmware:4.03.r11.4912720d.11201.142300.0000004:::::::*
xiongmaitech	ahb8004t-gl_firmware	Affected: 5.00.r02.00030751.10010.348717.0000000 cpe:2.3:o:xiongmaitech:ahb8004t-gl_firmware:5.00.r02.00030751.10010.348717.0000000:::::::*
xiongmaitech	ahb8004t-gl_firmware	Affected: 4.02.r11.c6380171.11201.141900.00000 cpe:2.3:o:xiongmaitech:ahb8004t-gl_firmware:4.02.r11.c6380171.11201.141900.00000:::::::*
xiongmaitech	ahb8004t-gl_firmware	Affected: 4.03.r11.0000020x.11201.042300.0000005 cpe:2.3:o:xiongmaitech:ahb8004t-gl_firmware:4.03.r11.0000020x.11201.042300.0000005:::::::*
xiongmaitech	ahb8004t-gl_firmware	Affected: 4.02.r11.24340142.10001.131900.00000 cpe:2.3:o:xiongmaitech:ahb8004t-gl_firmware:4.02.r11.24340142.10001.131900.00000:::::::*
xiongmaitech	xm530_r80x30-pq_8m_firmware	Affected: 4.03.r11.4915714a.12201.142300.0000000 cpe:2.3:o:xiongmaitech:xm530_r80x30-pq_8m_firmware:4.03.r11.4915714a.12201.142300.0000000:::::::*
xiongmaitech	xm530_r80x30-pq_8m_firmware	Affected: 4.02.r11.a8531149.10001.131900.00000 cpe:2.3:o:xiongmaitech:xm530_r80x30-pq_8m_firmware:4.02.r11.a8531149.10001.131900.00000:::::::*
xiongmaitech	xm530_r80x30-pq_8m_firmware	Affected: 4.03.r11.4912720b.11201.142300.0000004 cpe:2.3:o:xiongmaitech:xm530_r80x30-pq_8m_firmware:4.03.r11.4912720b.11201.142300.0000004:::::::*
xiongmaitech	xm530_r80x30-pq_8m_firmware	Affected: 4.03.r11.4912720d.11201.142300.0000004 cpe:2.3:o:xiongmaitech:xm530_r80x30-pq_8m_firmware:4.03.r11.4912720d.11201.142300.0000004:::::::*
xiongmaitech	xm530_r80x30-pq_8m_firmware	Affected: 5.00.r02.00030751.10010.348717.0000000 cpe:2.3:o:xiongmaitech:xm530_r80x30-pq_8m_firmware:5.00.r02.00030751.10010.348717.0000000:::::::*
xiongmaitech	xm530_r80x30-pq_8m_firmware	Affected: 4.02.r11.c6380171.11201.141900.00000 cpe:2.3:o:xiongmaitech:xm530_r80x30-pq_8m_firmware:4.02.r11.c6380171.11201.141900.00000:::::::*
xiongmaitech	xm530_r80x30-pq_8m_firmware	Affected: 4.03.r11.0000020x.11201.042300.0000005 cpe:2.3:o:xiongmaitech:xm530_r80x30-pq_8m_firmware:4.03.r11.0000020x.11201.042300.0000005:::::::*
xiongmaitech	xm530_r80x30-pq_8m_firmware	Affected: 4.02.r11.24340142.10001.131900.00000 cpe:2.3:o:xiongmaitech:xm530_r80x30-pq_8m_firmware:4.02.r11.24340142.10001.131900.00000:::::::*
xiongmaitech	ahb7004t-gs-v3_firmware	Affected: 4.03.r11.4915714a.12201.142300.0000000 cpe:2.3:o:xiongmaitech:ahb7004t-gs-v3_firmware:4.03.r11.4915714a.12201.142300.0000000:::::::*
xiongmaitech	ahb7004t-gs-v3_firmware	Affected: 4.02.r11.a8531149.10001.131900.00000 cpe:2.3:o:xiongmaitech:ahb7004t-gs-v3_firmware:4.02.r11.a8531149.10001.131900.00000:::::::*
xiongmaitech	ahb7004t-gs-v3_firmware	Affected: 4.03.r11.4912720b.11201.142300.0000004 cpe:2.3:o:xiongmaitech:ahb7004t-gs-v3_firmware:4.03.r11.4912720b.11201.142300.0000004:::::::*
xiongmaitech	ahb7004t-gs-v3_firmware	Affected: 4.03.r11.4912720d.11201.142300.0000004 cpe:2.3:o:xiongmaitech:ahb7004t-gs-v3_firmware:4.03.r11.4912720d.11201.142300.0000004:::::::*
xiongmaitech	ahb7004t-gs-v3_firmware	Affected: 5.00.r02.00030751.10010.348717.0000000 cpe:2.3:o:xiongmaitech:ahb7004t-gs-v3_firmware:5.00.r02.00030751.10010.348717.0000000:::::::*
xiongmaitech	ahb7004t-gs-v3_firmware	Affected: 4.02.r11.c6380171.11201.141900.00000 cpe:2.3:o:xiongmaitech:ahb7004t-gs-v3_firmware:4.02.r11.c6380171.11201.141900.00000:::::::*
xiongmaitech	ahb7004t-gs-v3_firmware	Affected: 4.03.r11.0000020x.11201.042300.0000005 cpe:2.3:o:xiongmaitech:ahb7004t-gs-v3_firmware:4.03.r11.0000020x.11201.042300.0000005:::::::*
xiongmaitech	ahb7004t-gs-v3_firmware	Affected: 4.02.r11.24340142.10001.131900.00000 cpe:2.3:o:xiongmaitech:ahb7004t-gs-v3_firmware:4.02.r11.24340142.10001.131900.00000:::::::*
xiongmaitech	ahb8032f-lme_firmware	Affected: 4.03.r11.4915714a.12201.142300.0000000 cpe:2.3:o:xiongmaitech:ahb8032f-lme_firmware:4.03.r11.4915714a.12201.142300.0000000:::::::*
xiongmaitech	ahb8032f-lme_firmware	Affected: 4.02.r11.a8531149.10001.131900.00000 cpe:2.3:o:xiongmaitech:ahb8032f-lme_firmware:4.02.r11.a8531149.10001.131900.00000:::::::*
xiongmaitech	ahb8032f-lme_firmware	Affected: 4.03.r11.4912720b.11201.142300.0000004 cpe:2.3:o:xiongmaitech:ahb8032f-lme_firmware:4.03.r11.4912720b.11201.142300.0000004:::::::*
xiongmaitech	ahb8032f-lme_firmware	Affected: 4.03.r11.4912720d.11201.142300.0000004 cpe:2.3:o:xiongmaitech:ahb8032f-lme_firmware:4.03.r11.4912720d.11201.142300.0000004:::::::*
xiongmaitech	ahb8032f-lme_firmware	Affected: 5.00.r02.00030751.10010.348717.0000000 cpe:2.3:o:xiongmaitech:ahb8032f-lme_firmware:5.00.r02.00030751.10010.348717.0000000:::::::*
xiongmaitech	ahb8032f-lme_firmware	Affected: 4.02.r11.c6380171.11201.141900.00000 cpe:2.3:o:xiongmaitech:ahb8032f-lme_firmware:4.02.r11.c6380171.11201.141900.00000:::::::*
xiongmaitech	ahb8032f-lme_firmware	Affected: 4.03.r11.0000020x.11201.042300.0000005 cpe:2.3:o:xiongmaitech:ahb8032f-lme_firmware:4.03.r11.0000020x.11201.042300.0000005:::::::*
xiongmaitech	ahb8032f-lme_firmware	Affected: 4.02.r11.24340142.10001.131900.00000 cpe:2.3:o:xiongmaitech:ahb8032f-lme_firmware:4.02.r11.24340142.10001.131900.00000:::::::*
xiongmaitech	ahb7004t-mhv2_firmware	Affected: 4.03.r11.4915714a.12201.142300.0000000 cpe:2.3:o:xiongmaitech:ahb7004t-mhv2_firmware:4.03.r11.4915714a.12201.142300.0000000:::::::*
xiongmaitech	ahb7004t-mhv2_firmware	Affected: 4.02.r11.a8531149.10001.131900.00000 cpe:2.3:o:xiongmaitech:ahb7004t-mhv2_firmware:4.02.r11.a8531149.10001.131900.00000:::::::*
xiongmaitech	ahb7004t-mhv2_firmware	Affected: 4.03.r11.4912720b.11201.142300.0000004 cpe:2.3:o:xiongmaitech:ahb7004t-mhv2_firmware:4.03.r11.4912720b.11201.142300.0000004:::::::*
xiongmaitech	ahb7004t-mhv2_firmware	Affected: 4.03.r11.4912720d.11201.142300.0000004 cpe:2.3:o:xiongmaitech:ahb7004t-mhv2_firmware:4.03.r11.4912720d.11201.142300.0000004:::::::*
xiongmaitech	ahb7004t-mhv2_firmware	Affected: 5.00.r02.00030751.10010.348717.0000000 cpe:2.3:o:xiongmaitech:ahb7004t-mhv2_firmware:5.00.r02.00030751.10010.348717.0000000:::::::*
xiongmaitech	ahb7004t-mhv2_firmware	Affected: 4.02.r11.c6380171.11201.141900.00000 cpe:2.3:o:xiongmaitech:ahb7004t-mhv2_firmware:4.02.r11.c6380171.11201.141900.00000:::::::*
xiongmaitech	ahb7004t-mhv2_firmware	Affected: 4.03.r11.0000020x.11201.042300.0000005 cpe:2.3:o:xiongmaitech:ahb7004t-mhv2_firmware:4.03.r11.0000020x.11201.042300.0000005:::::::*
xiongmaitech	ahb7004t-mhv2_firmware	Affected: 4.02.r11.24340142.10001.131900.00000 cpe:2.3:o:xiongmaitech:ahb7004t-mhv2_firmware:4.02.r11.24340142.10001.131900.00000:::::::*

Credits

netsecfish (VulDB User)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T20:20:01.820Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "VDB-260605 | Xiongmai AHB7804R-MH-V2 Sofia Service access control",
            "tags": [
              "vdb-entry",
              "technical-description",
              "mitigation",
              "x_transferred"
            ],
            "url": "https://vuldb.com/?id.260605"
          },
          {
            "name": "VDB-260605 | CTI Indicators (IOB, IOC, TTP, IOA)",
            "tags": [
              "signature",
              "permissions-required",
              "x_transferred"
            ],
            "url": "https://vuldb.com/?ctiid.260605"
          },
          {
            "name": "Submit #311903 | Xiongmai AHB7804R-MH-V2, AHB8008T-GL, AHB8004T-GL, XM530_R80X30-PQ_8M, AHB7004T-GS-V3, AHB8032F-LME, AHB7004T-MHV2 V4.03.R11.4915714A.12201.142300.0000000, V4.02.R11.A8531149.10001.131900.00000, V4.03.R11.4912720B.11201.142300.0000004, V4.03.R Incorrect A",
            "tags": [
              "third-party-advisory",
              "x_transferred"
            ],
            "url": "https://vuldb.com/?submit.311903"
          },
          {
            "tags": [
              "related",
              "x_transferred"
            ],
            "url": "https://github.com/netsecfish/xiongmai_incorrect_access_control"
          },
          {
            "tags": [
              "exploit",
              "x_transferred"
            ],
            "url": "https://github.com/netsecfish/xiongmai_incorrect_access_control/blob/main/pocCheck3-en.py"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb7804r-mh-v2_firmware:4.02.r11.24340142.10001.131900.00000:*:*:*:*:*:*:*",
              "cpe:2.3:o:xiongmaitech:ahb7804r-mh-v2_firmware:4.02.r11.a8531149.10001.131900.00000:*:*:*:*:*:*:*",
              "cpe:2.3:o:xiongmaitech:ahb7804r-mh-v2_firmware:4.02.r11.c6380171.11201.141900.00000:*:*:*:*:*:*:*",
              "cpe:2.3:o:xiongmaitech:ahb7804r-mh-v2_firmware:4.03.r11.0000020x.11201.042300.0000005:*:*:*:*:*:*:*",
              "cpe:2.3:o:xiongmaitech:ahb7804r-mh-v2_firmware:4.03.r11.4912720b.11201.142300.0000004:*:*:*:*:*:*:*",
              "cpe:2.3:o:xiongmaitech:ahb7804r-mh-v2_firmware:4.03.r11.4912720d.11201.142300.0000004:*:*:*:*:*:*:*",
              "cpe:2.3:o:xiongmaitech:ahb7804r-mh-v2_firmware:4.03.r11.4915714a.12201.142300.0000000:*:*:*:*:*:*:*",
              "cpe:2.3:o:xiongmaitech:ahb7804r-mh-v2_firmware:5.00.r02.00030751.10010.348717.0000000:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb7804r-mh-v2_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.02.r11.24340142.10001.131900.00000"
              },
              {
                "status": "affected",
                "version": "4.02.r11.a8531149.10001.131900.00000"
              },
              {
                "status": "affected",
                "version": "4.02.r11.c6380171.11201.141900.00000"
              },
              {
                "status": "affected",
                "version": "4.03.r11.0000020x.11201.042300.0000005"
              },
              {
                "status": "affected",
                "version": "4.03.r11.4912720b.11201.142300.0000004"
              },
              {
                "status": "affected",
                "version": "4.03.r11.4912720d.11201.142300.0000004"
              },
              {
                "status": "affected",
                "version": "4.03.r11.4915714a.12201.142300.0000000"
              },
              {
                "status": "affected",
                "version": "5.00.r02.00030751.10010.348717.0000000"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb8008t-gl_firmware:4.03.r11.4915714a.12201.142300.0000000:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb8008t-gl_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.03.r11.4915714a.12201.142300.0000000"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb8008t-gl_firmware:4.02.r11.a8531149.10001.131900.00000:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb8008t-gl_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.02.r11.a8531149.10001.131900.00000"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb8008t-gl_firmware:4.03.r11.4912720b.11201.142300.0000004:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb8008t-gl_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.03.r11.4912720b.11201.142300.0000004"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb8008t-gl_firmware:4.03.r11.4912720d.11201.142300.0000004:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb8008t-gl_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.03.r11.4912720d.11201.142300.0000004"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb8008t-gl_firmware:5.00.r02.00030751.10010.348717.0000000:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb8008t-gl_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "5.00.r02.00030751.10010.348717.0000000"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb8008t-gl_firmware:4.02.r11.c6380171.11201.141900.00000:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb8008t-gl_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.02.r11.c6380171.11201.141900.00000"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb8008t-gl_firmware:4.03.r11.0000020x.11201.042300.0000005:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb8008t-gl_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.03.r11.0000020x.11201.042300.0000005"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb8008t-gl_firmware:4.02.r11.24340142.10001.131900.00000:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb8008t-gl_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.02.r11.24340142.10001.131900.00000"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb8004t-gl_firmware:4.03.r11.4915714a.12201.142300.0000000:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb8004t-gl_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.03.r11.4915714a.12201.142300.0000000"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb8004t-gl_firmware:4.02.r11.a8531149.10001.131900.00000:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb8004t-gl_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.02.r11.a8531149.10001.131900.00000"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb8004t-gl_firmware:4.03.r11.4912720b.11201.142300.0000004:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb8004t-gl_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.03.r11.4912720b.11201.142300.0000004"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb8004t-gl_firmware:4.03.r11.4912720d.11201.142300.0000004:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb8004t-gl_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.03.r11.4912720d.11201.142300.0000004"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb8004t-gl_firmware:5.00.r02.00030751.10010.348717.0000000:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb8004t-gl_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "5.00.r02.00030751.10010.348717.0000000"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb8004t-gl_firmware:4.02.r11.c6380171.11201.141900.00000:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb8004t-gl_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.02.r11.c6380171.11201.141900.00000"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb8004t-gl_firmware:4.03.r11.0000020x.11201.042300.0000005:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb8004t-gl_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.03.r11.0000020x.11201.042300.0000005"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb8004t-gl_firmware:4.02.r11.24340142.10001.131900.00000:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb8004t-gl_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.02.r11.24340142.10001.131900.00000"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:xm530_r80x30-pq_8m_firmware:4.03.r11.4915714a.12201.142300.0000000:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "xm530_r80x30-pq_8m_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.03.r11.4915714a.12201.142300.0000000"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:xm530_r80x30-pq_8m_firmware:4.02.r11.a8531149.10001.131900.00000:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "xm530_r80x30-pq_8m_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.02.r11.a8531149.10001.131900.00000"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:xm530_r80x30-pq_8m_firmware:4.03.r11.4912720b.11201.142300.0000004:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "xm530_r80x30-pq_8m_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.03.r11.4912720b.11201.142300.0000004"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:xm530_r80x30-pq_8m_firmware:4.03.r11.4912720d.11201.142300.0000004:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "xm530_r80x30-pq_8m_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.03.r11.4912720d.11201.142300.0000004"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:xm530_r80x30-pq_8m_firmware:5.00.r02.00030751.10010.348717.0000000:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "xm530_r80x30-pq_8m_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "5.00.r02.00030751.10010.348717.0000000"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:xm530_r80x30-pq_8m_firmware:4.02.r11.c6380171.11201.141900.00000:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "xm530_r80x30-pq_8m_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.02.r11.c6380171.11201.141900.00000"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:xm530_r80x30-pq_8m_firmware:4.03.r11.0000020x.11201.042300.0000005:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "xm530_r80x30-pq_8m_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.03.r11.0000020x.11201.042300.0000005"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:xm530_r80x30-pq_8m_firmware:4.02.r11.24340142.10001.131900.00000:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "xm530_r80x30-pq_8m_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.02.r11.24340142.10001.131900.00000"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb7004t-gs-v3_firmware:4.03.r11.4915714a.12201.142300.0000000:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb7004t-gs-v3_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.03.r11.4915714a.12201.142300.0000000"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb7004t-gs-v3_firmware:4.02.r11.a8531149.10001.131900.00000:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb7004t-gs-v3_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.02.r11.a8531149.10001.131900.00000"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb7004t-gs-v3_firmware:4.03.r11.4912720b.11201.142300.0000004:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb7004t-gs-v3_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.03.r11.4912720b.11201.142300.0000004"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb7004t-gs-v3_firmware:4.03.r11.4912720d.11201.142300.0000004:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb7004t-gs-v3_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.03.r11.4912720d.11201.142300.0000004"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb7004t-gs-v3_firmware:5.00.r02.00030751.10010.348717.0000000:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb7004t-gs-v3_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "5.00.r02.00030751.10010.348717.0000000"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb7004t-gs-v3_firmware:4.02.r11.c6380171.11201.141900.00000:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb7004t-gs-v3_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.02.r11.c6380171.11201.141900.00000"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb7004t-gs-v3_firmware:4.03.r11.0000020x.11201.042300.0000005:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb7004t-gs-v3_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.03.r11.0000020x.11201.042300.0000005"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb7004t-gs-v3_firmware:4.02.r11.24340142.10001.131900.00000:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb7004t-gs-v3_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.02.r11.24340142.10001.131900.00000"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb8032f-lme_firmware:4.03.r11.4915714a.12201.142300.0000000:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb8032f-lme_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.03.r11.4915714a.12201.142300.0000000"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb8032f-lme_firmware:4.02.r11.a8531149.10001.131900.00000:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb8032f-lme_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.02.r11.a8531149.10001.131900.00000"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb8032f-lme_firmware:4.03.r11.4912720b.11201.142300.0000004:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb8032f-lme_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.03.r11.4912720b.11201.142300.0000004"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb8032f-lme_firmware:4.03.r11.4912720d.11201.142300.0000004:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb8032f-lme_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.03.r11.4912720d.11201.142300.0000004"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb8032f-lme_firmware:5.00.r02.00030751.10010.348717.0000000:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb8032f-lme_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "5.00.r02.00030751.10010.348717.0000000"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb8032f-lme_firmware:4.02.r11.c6380171.11201.141900.00000:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb8032f-lme_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.02.r11.c6380171.11201.141900.00000"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb8032f-lme_firmware:4.03.r11.0000020x.11201.042300.0000005:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb8032f-lme_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.03.r11.0000020x.11201.042300.0000005"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb8032f-lme_firmware:4.02.r11.24340142.10001.131900.00000:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb8032f-lme_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.02.r11.24340142.10001.131900.00000"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb7004t-mhv2_firmware:4.03.r11.4915714a.12201.142300.0000000:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb7004t-mhv2_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.03.r11.4915714a.12201.142300.0000000"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb7004t-mhv2_firmware:4.02.r11.a8531149.10001.131900.00000:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb7004t-mhv2_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.02.r11.a8531149.10001.131900.00000"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb7004t-mhv2_firmware:4.03.r11.4912720b.11201.142300.0000004:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb7004t-mhv2_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.03.r11.4912720b.11201.142300.0000004"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb7004t-mhv2_firmware:4.03.r11.4912720d.11201.142300.0000004:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb7004t-mhv2_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.03.r11.4912720d.11201.142300.0000004"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb7004t-mhv2_firmware:5.00.r02.00030751.10010.348717.0000000:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb7004t-mhv2_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "5.00.r02.00030751.10010.348717.0000000"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb7004t-mhv2_firmware:4.02.r11.c6380171.11201.141900.00000:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb7004t-mhv2_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.02.r11.c6380171.11201.141900.00000"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb7004t-mhv2_firmware:4.03.r11.0000020x.11201.042300.0000005:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb7004t-mhv2_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.03.r11.0000020x.11201.042300.0000005"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb7004t-mhv2_firmware:4.02.r11.24340142.10001.131900.00000:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb7004t-mhv2_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.02.r11.24340142.10001.131900.00000"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-3765",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-04-15T13:40:05.259780Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-08-08T20:19:23.996Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "modules": [
            "Sofia Service"
          ],
          "product": "AHB7804R-MH-V2",
          "vendor": "Xiongmai",
          "versions": [
            {
              "status": "affected",
              "version": "4.02.R11.24340142.10001.131900.00000"
            },
            {
              "status": "affected",
              "version": "4.02.R11.A8531149.10001.131900.00000"
            },
            {
              "status": "affected",
              "version": "4.02.R11.C6380171.11201.141900.00000"
            },
            {
              "status": "affected",
              "version": "4.03.R11.0000020X.11201.042300.0000005"
            },
            {
              "status": "affected",
              "version": "4.03.R11.4912720B.11201.142300.0000004"
            },
            {
              "status": "affected",
              "version": "4.03.R11.4912720D.11201.142300.0000004"
            },
            {
              "status": "affected",
              "version": "4.03.R11.4915714A.12201.142300.0000000"
            },
            {
              "status": "affected",
              "version": "5.00.R02.00030751.10010.348717.0000000"
            }
          ]
        },
        {
          "modules": [
            "Sofia Service"
          ],
          "product": "AHB8004T-GL",
          "vendor": "Xiongmai",
          "versions": [
            {
              "status": "affected",
              "version": "4.02.R11.24340142.10001.131900.00000"
            },
            {
              "status": "affected",
              "version": "4.02.R11.A8531149.10001.131900.00000"
            },
            {
              "status": "affected",
              "version": "4.02.R11.C6380171.11201.141900.00000"
            },
            {
              "status": "affected",
              "version": "4.03.R11.0000020X.11201.042300.0000005"
            },
            {
              "status": "affected",
              "version": "4.03.R11.4912720B.11201.142300.0000004"
            },
            {
              "status": "affected",
              "version": "4.03.R11.4912720D.11201.142300.0000004"
            },
            {
              "status": "affected",
              "version": "4.03.R11.4915714A.12201.142300.0000000"
            },
            {
              "status": "affected",
              "version": "5.00.R02.00030751.10010.348717.0000000"
            }
          ]
        },
        {
          "modules": [
            "Sofia Service"
          ],
          "product": "AHB8008T-GL",
          "vendor": "Xiongmai",
          "versions": [
            {
              "status": "affected",
              "version": "4.02.R11.24340142.10001.131900.00000"
            },
            {
              "status": "affected",
              "version": "4.02.R11.A8531149.10001.131900.00000"
            },
            {
              "status": "affected",
              "version": "4.02.R11.C6380171.11201.141900.00000"
            },
            {
              "status": "affected",
              "version": "4.03.R11.0000020X.11201.042300.0000005"
            },
            {
              "status": "affected",
              "version": "4.03.R11.4912720B.11201.142300.0000004"
            },
            {
              "status": "affected",
              "version": "4.03.R11.4912720D.11201.142300.0000004"
            },
            {
              "status": "affected",
              "version": "4.03.R11.4915714A.12201.142300.0000000"
            },
            {
              "status": "affected",
              "version": "5.00.R02.00030751.10010.348717.0000000"
            }
          ]
        },
        {
          "modules": [
            "Sofia Service"
          ],
          "product": "AHB7004T-GS-V3",
          "vendor": "Xiongmai",
          "versions": [
            {
              "status": "affected",
              "version": "4.02.R11.24340142.10001.131900.00000"
            },
            {
              "status": "affected",
              "version": "4.02.R11.A8531149.10001.131900.00000"
            },
            {
              "status": "affected",
              "version": "4.02.R11.C6380171.11201.141900.00000"
            },
            {
              "status": "affected",
              "version": "4.03.R11.0000020X.11201.042300.0000005"
            },
            {
              "status": "affected",
              "version": "4.03.R11.4912720B.11201.142300.0000004"
            },
            {
              "status": "affected",
              "version": "4.03.R11.4912720D.11201.142300.0000004"
            },
            {
              "status": "affected",
              "version": "4.03.R11.4915714A.12201.142300.0000000"
            },
            {
              "status": "affected",
              "version": "5.00.R02.00030751.10010.348717.0000000"
            }
          ]
        },
        {
          "modules": [
            "Sofia Service"
          ],
          "product": "AHB7004T-MHV2",
          "vendor": "Xiongmai",
          "versions": [
            {
              "status": "affected",
              "version": "4.02.R11.24340142.10001.131900.00000"
            },
            {
              "status": "affected",
              "version": "4.02.R11.A8531149.10001.131900.00000"
            },
            {
              "status": "affected",
              "version": "4.02.R11.C6380171.11201.141900.00000"
            },
            {
              "status": "affected",
              "version": "4.03.R11.0000020X.11201.042300.0000005"
            },
            {
              "status": "affected",
              "version": "4.03.R11.4912720B.11201.142300.0000004"
            },
            {
              "status": "affected",
              "version": "4.03.R11.4912720D.11201.142300.0000004"
            },
            {
              "status": "affected",
              "version": "4.03.R11.4915714A.12201.142300.0000000"
            },
            {
              "status": "affected",
              "version": "5.00.R02.00030751.10010.348717.0000000"
            }
          ]
        },
        {
          "modules": [
            "Sofia Service"
          ],
          "product": "AHB8032F-LME",
          "vendor": "Xiongmai",
          "versions": [
            {
              "status": "affected",
              "version": "4.02.R11.24340142.10001.131900.00000"
            },
            {
              "status": "affected",
              "version": "4.02.R11.A8531149.10001.131900.00000"
            },
            {
              "status": "affected",
              "version": "4.02.R11.C6380171.11201.141900.00000"
            },
            {
              "status": "affected",
              "version": "4.03.R11.0000020X.11201.042300.0000005"
            },
            {
              "status": "affected",
              "version": "4.03.R11.4912720B.11201.142300.0000004"
            },
            {
              "status": "affected",
              "version": "4.03.R11.4912720D.11201.142300.0000004"
            },
            {
              "status": "affected",
              "version": "4.03.R11.4915714A.12201.142300.0000000"
            },
            {
              "status": "affected",
              "version": "5.00.R02.00030751.10010.348717.0000000"
            }
          ]
        },
        {
          "modules": [
            "Sofia Service"
          ],
          "product": "XM530_R80X30-PQ_8M",
          "vendor": "Xiongmai",
          "versions": [
            {
              "status": "affected",
              "version": "4.02.R11.24340142.10001.131900.00000"
            },
            {
              "status": "affected",
              "version": "4.02.R11.A8531149.10001.131900.00000"
            },
            {
              "status": "affected",
              "version": "4.02.R11.C6380171.11201.141900.00000"
            },
            {
              "status": "affected",
              "version": "4.03.R11.0000020X.11201.042300.0000005"
            },
            {
              "status": "affected",
              "version": "4.03.R11.4912720B.11201.142300.0000004"
            },
            {
              "status": "affected",
              "version": "4.03.R11.4912720D.11201.142300.0000004"
            },
            {
              "status": "affected",
              "version": "4.03.R11.4915714A.12201.142300.0000000"
            },
            {
              "status": "affected",
              "version": "5.00.R02.00030751.10010.348717.0000000"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "netsecfish (VulDB User)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability classified as critical was found in Xiongmai AHB7804R-MH-V2, AHB8004T-GL, AHB8008T-GL, AHB7004T-GS-V3, AHB7004T-MHV2, AHB8032F-LME and XM530_R80X30-PQ_8M. Affected by this vulnerability is an unknown functionality of the component Sofia Service. The manipulation with the input ff00000000000000000000000000f103250000007b202252657422203a203130302c202253657373696f6e494422203a202230783022207d0a leads to improper access controls. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-260605 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way."
        },
        {
          "lang": "de",
          "value": "In Xiongmai AHB7804R-MH-V2, AHB8004T-GL, AHB8008T-GL, AHB7004T-GS-V3, AHB7004T-MHV2, AHB8032F-LME and XM530_R80X30-PQ_8M wurde eine kritische Schwachstelle entdeckt. Es geht um eine nicht n\u00e4her bekannte Funktion der Komponente Sofia Service. Durch Manipulation mit der Eingabe ff00000000000000000000000000f103250000007b202252657422203a203130302c202253657373696f6e494422203a202230783022207d0a mit unbekannten Daten kann eine improper access controls-Schwachstelle ausgenutzt werden. Der Angriff kann \u00fcber das Netzwerk erfolgen. Der Exploit steht zur \u00f6ffentlichen Verf\u00fcgung."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        },
        {
          "cvssV3_0": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        },
        {
          "cvssV2_0": {
            "baseScore": 10,
            "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-284",
              "description": "CWE-284 Improper Access Controls",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-04-14T23:00:05.199Z",
        "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "shortName": "VulDB"
      },
      "references": [
        {
          "name": "VDB-260605 | Xiongmai AHB7804R-MH-V2 Sofia Service access control",
          "tags": [
            "vdb-entry",
            "technical-description",
            "mitigation"
          ],
          "url": "https://vuldb.com/?id.260605"
        },
        {
          "name": "VDB-260605 | CTI Indicators (IOB, IOC, TTP, IOA)",
          "tags": [
            "signature",
            "permissions-required"
          ],
          "url": "https://vuldb.com/?ctiid.260605"
        },
        {
          "name": "Submit #311903 | Xiongmai AHB7804R-MH-V2, AHB8008T-GL, AHB8004T-GL, XM530_R80X30-PQ_8M, AHB7004T-GS-V3, AHB8032F-LME, AHB7004T-MHV2 V4.03.R11.4915714A.12201.142300.0000000, V4.02.R11.A8531149.10001.131900.00000, V4.03.R11.4912720B.11201.142300.0000004, V4.03.R Incorrect A",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/?submit.311903"
        },
        {
          "tags": [
            "related"
          ],
          "url": "https://github.com/netsecfish/xiongmai_incorrect_access_control"
        },
        {
          "tags": [
            "exploit"
          ],
          "url": "https://github.com/netsecfish/xiongmai_incorrect_access_control/blob/main/pocCheck3-en.py"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2024-04-14T00:00:00.000Z",
          "value": "Advisory disclosed"
        },
        {
          "lang": "en",
          "time": "2024-04-14T02:00:00.000Z",
          "value": "VulDB entry created"
        },
        {
          "lang": "en",
          "time": "2024-04-14T10:50:01.000Z",
          "value": "VulDB entry last update"
        }
      ],
      "title": "Xiongmai AHB7804R-MH-V2 Sofia Service access control"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
    "assignerShortName": "VulDB",
    "cveId": "CVE-2024-3765",
    "datePublished": "2024-04-14T23:00:05.199Z",
    "dateReserved": "2024-04-14T08:43:42.949Z",
    "dateUpdated": "2024-08-08T20:19:23.996Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-17919 (GCVE-0-2018-17919)

Vulnerability from nvd – Published: 2018-10-10 15:00 – Updated: 2024-09-16 18:03

Summary

All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server may allow an attacker to use an undocumented user account "default" with its default password to login to XMeye and access/view video streams.

Severity

No CVSS data available.

CWE

CWE-912 - HIDDEN FUNCTIONALITY CWE-912

Assigner

icscert icscert root Scorecard

References

1 reference

URL	Tags
https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
Hangzhou Xiongmai Technology Co., Ltd	XMeye P2P Cloud Server	Affected: All versions

Date Public

2018-10-09 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T11:01:14.661Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "XMeye P2P Cloud Server",
          "vendor": "Hangzhou Xiongmai Technology Co., Ltd",
          "versions": [
            {
              "status": "affected",
              "version": "All versions"
            }
          ]
        }
      ],
      "datePublic": "2018-10-09T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server may allow an attacker to use an undocumented user account \"default\" with its default password to login to XMeye and access/view video streams."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-912",
              "description": "HIDDEN FUNCTIONALITY CWE-912",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-10T14:57:01.000Z",
        "orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
        "shortName": "icscert"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "ics-cert@hq.dhs.gov",
          "DATE_PUBLIC": "2018-10-09T00:00:00",
          "ID": "CVE-2018-17919",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "XMeye P2P Cloud Server",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Hangzhou Xiongmai Technology Co., Ltd"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server may allow an attacker to use an undocumented user account \"default\" with its default password to login to XMeye and access/view video streams."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "HIDDEN FUNCTIONALITY CWE-912"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06",
              "refsource": "MISC",
              "url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
    "assignerShortName": "icscert",
    "cveId": "CVE-2018-17919",
    "datePublished": "2018-10-10T15:00:00.000Z",
    "dateReserved": "2018-10-02T00:00:00.000Z",
    "dateUpdated": "2024-09-16T18:03:48.747Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-17917 (GCVE-0-2018-17917)

Vulnerability from nvd – Published: 2018-10-10 15:00 – Updated: 2024-09-16 17:59

Summary

All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server may allow an attacker to use MAC addresses to enumerate potential Cloud IDs. Using this ID, the attacker can discover and connect to valid devices using one of the supported apps.

Severity

No CVSS data available.

CWE

CWE-341 - PREDICTABLE FROM OBSERVABLE STATE CWE-341

Assigner

icscert icscert root Scorecard

References

1 reference

URL	Tags
https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
Hangzhou Xiongmai Technology Co., Ltd	XMeye P2P Cloud Server	Affected: All versions

Date Public

2018-10-09 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T11:01:14.674Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "XMeye P2P Cloud Server",
          "vendor": "Hangzhou Xiongmai Technology Co., Ltd",
          "versions": [
            {
              "status": "affected",
              "version": "All versions"
            }
          ]
        }
      ],
      "datePublic": "2018-10-09T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server may allow an attacker to use MAC addresses to enumerate potential Cloud IDs. Using this ID, the attacker can discover and connect to valid devices using one of the supported apps."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-341",
              "description": "PREDICTABLE FROM OBSERVABLE STATE CWE-341",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-10T14:57:01.000Z",
        "orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
        "shortName": "icscert"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "ics-cert@hq.dhs.gov",
          "DATE_PUBLIC": "2018-10-09T00:00:00",
          "ID": "CVE-2018-17917",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "XMeye P2P Cloud Server",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Hangzhou Xiongmai Technology Co., Ltd"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server may allow an attacker to use MAC addresses to enumerate potential Cloud IDs. Using this ID, the attacker can discover and connect to valid devices using one of the supported apps."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "PREDICTABLE FROM OBSERVABLE STATE CWE-341"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06",
              "refsource": "MISC",
              "url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
    "assignerShortName": "icscert",
    "cveId": "CVE-2018-17917",
    "datePublished": "2018-10-10T15:00:00.000Z",
    "dateReserved": "2018-10-02T00:00:00.000Z",
    "dateUpdated": "2024-09-16T17:59:25.518Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-17915 (GCVE-0-2018-17915)

Vulnerability from nvd – Published: 2018-10-10 15:00 – Updated: 2024-09-16 22:56

Summary

All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server do not encrypt all device communication. This includes the XMeye service and firmware update communication. This could allow an attacker to eavesdrop on video feeds, steal XMeye login credentials, or impersonate the update server with malicious update code.

Severity

No CVSS data available.

CWE

CWE-311 - MISSING ENCRYPTION OF SENSITIVE DATA CWE-311

Assigner

icscert icscert root Scorecard

References

1 reference

URL	Tags
https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
Hangzhou Xiongmai Technology Co., Ltd	XMeye P2P Cloud Server	Affected: All versions

Date Public

2018-10-09 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T11:01:14.678Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "XMeye P2P Cloud Server",
          "vendor": "Hangzhou Xiongmai Technology Co., Ltd",
          "versions": [
            {
              "status": "affected",
              "version": "All versions"
            }
          ]
        }
      ],
      "datePublic": "2018-10-09T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server do not encrypt all device communication. This includes the XMeye service and firmware update communication. This could allow an attacker to eavesdrop on video feeds, steal XMeye login credentials, or impersonate the update server with malicious update code."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-311",
              "description": "MISSING ENCRYPTION OF SENSITIVE DATA CWE-311",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-10T14:57:01.000Z",
        "orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
        "shortName": "icscert"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "ics-cert@hq.dhs.gov",
          "DATE_PUBLIC": "2018-10-09T00:00:00",
          "ID": "CVE-2018-17915",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "XMeye P2P Cloud Server",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Hangzhou Xiongmai Technology Co., Ltd"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server do not encrypt all device communication. This includes the XMeye service and firmware update communication. This could allow an attacker to eavesdrop on video feeds, steal XMeye login credentials, or impersonate the update server with malicious update code."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "MISSING ENCRYPTION OF SENSITIVE DATA CWE-311"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06",
              "refsource": "MISC",
              "url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
    "assignerShortName": "icscert",
    "cveId": "CVE-2018-17915",
    "datePublished": "2018-10-10T15:00:00.000Z",
    "dateReserved": "2018-10-02T00:00:00.000Z",
    "dateUpdated": "2024-09-16T22:56:29.656Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-10088 (GCVE-0-2018-10088)

Vulnerability from nvd – Published: 2018-06-08 12:00 – Updated: 2024-08-05 07:32

Summary

Buffer overflow in XiongMai uc-httpd 1.0.0 has unspecified impact and attack vectors, a different vulnerability than CVE-2017-16725.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root Scorecard

References

2 references

URL	Tags
https://github.com/bitfu/uc-httpd-1.0.0-buffer-ov…	x_refsource_MISC
https://www.exploit-db.com/exploits/44864/	exploitx_refsource_EXPLOIT-DB

Date Public

2018-06-08 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T07:32:00.908Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/bitfu/uc-httpd-1.0.0-buffer-overflow-exploit"
          },
          {
            "name": "44864",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "https://www.exploit-db.com/exploits/44864/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-06-08T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Buffer overflow in XiongMai uc-httpd 1.0.0 has unspecified impact and attack vectors, a different vulnerability than CVE-2017-16725."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-06-10T09:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/bitfu/uc-httpd-1.0.0-buffer-overflow-exploit"
        },
        {
          "name": "44864",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "https://www.exploit-db.com/exploits/44864/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-10088",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Buffer overflow in XiongMai uc-httpd 1.0.0 has unspecified impact and attack vectors, a different vulnerability than CVE-2017-16725."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/bitfu/uc-httpd-1.0.0-buffer-overflow-exploit",
              "refsource": "MISC",
              "url": "https://github.com/bitfu/uc-httpd-1.0.0-buffer-overflow-exploit"
            },
            {
              "name": "44864",
              "refsource": "EXPLOIT-DB",
              "url": "https://www.exploit-db.com/exploits/44864/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-10088",
    "datePublished": "2018-06-08T12:00:00.000Z",
    "dateReserved": "2018-04-13T00:00:00.000Z",
    "dateUpdated": "2024-08-05T07:32:00.908Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-7577 (GCVE-0-2017-7577)

Vulnerability from nvd – Published: 2017-04-07 04:33 – Updated: 2024-08-05 16:04

Summary

XiongMai uc-httpd has directory traversal allowing the reading of arbitrary files via a "GET ../" HTTP request.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root Scorecard

References

1 reference

URL	Tags
http://zeroday.insecurity.zone/exploits/uc-httpd_…	x_refsource_MISC

Date Public

2017-04-06 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T16:04:12.111Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://zeroday.insecurity.zone/exploits/uc-httpd_lfi.txt"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-04-06T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "XiongMai uc-httpd has directory traversal allowing the reading of arbitrary files via a \"GET ../\" HTTP request."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-04-07T04:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://zeroday.insecurity.zone/exploits/uc-httpd_lfi.txt"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-7577",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "XiongMai uc-httpd has directory traversal allowing the reading of arbitrary files via a \"GET ../\" HTTP request."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://zeroday.insecurity.zone/exploits/uc-httpd_lfi.txt",
              "refsource": "MISC",
              "url": "http://zeroday.insecurity.zone/exploits/uc-httpd_lfi.txt"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2017-7577",
    "datePublished": "2017-04-07T04:33:00.000Z",
    "dateReserved": "2017-04-06T00:00:00.000Z",
    "dateUpdated": "2024-08-05T16:04:12.111Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-3765 (GCVE-0-2024-3765)

Vulnerability from cvelistv5 – Published: 2024-04-14 23:00 – Updated: 2024-08-08 20:19

Title

Xiongmai AHB7804R-MH-V2 Sofia Service access control

Summary

Severity

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.8 (Critical)


                        
                          CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: poc Automatable: yes Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-04-15 13:40 UTC

CWE

CWE-284 - Improper Access Controls

Assigner

VulDB mitre root Scorecard

References

5 references

URL	Tags
https://vuldb.com/?id.260605	vdb-entrytechnical-descriptionmitigation
https://vuldb.com/?ctiid.260605	signaturepermissions-required
https://vuldb.com/?submit.311903	third-party-advisory
https://github.com/netsecfish/xiongmai_incorrect_…	related
https://github.com/netsecfish/xiongmai_incorrect_…	exploit

Impacted products

56 products

Vendor	Product	Version
Xiongmai	AHB7804R-MH-V2	Affected: 4.02.R11.24340142.10001.131900.00000 Affected: 4.02.R11.A8531149.10001.131900.00000 Affected: 4.02.R11.C6380171.11201.141900.00000 Affected: 4.03.R11.0000020X.11201.042300.0000005 Affected: 4.03.R11.4912720B.11201.142300.0000004 Affected: 4.03.R11.4912720D.11201.142300.0000004 Affected: 4.03.R11.4915714A.12201.142300.0000000 Affected: 5.00.R02.00030751.10010.348717.0000000
Xiongmai	AHB8004T-GL	Affected: 4.02.R11.24340142.10001.131900.00000 Affected: 4.02.R11.A8531149.10001.131900.00000 Affected: 4.02.R11.C6380171.11201.141900.00000 Affected: 4.03.R11.0000020X.11201.042300.0000005 Affected: 4.03.R11.4912720B.11201.142300.0000004 Affected: 4.03.R11.4912720D.11201.142300.0000004 Affected: 4.03.R11.4915714A.12201.142300.0000000 Affected: 5.00.R02.00030751.10010.348717.0000000
Xiongmai	AHB8008T-GL	Affected: 4.02.R11.24340142.10001.131900.00000 Affected: 4.02.R11.A8531149.10001.131900.00000 Affected: 4.02.R11.C6380171.11201.141900.00000 Affected: 4.03.R11.0000020X.11201.042300.0000005 Affected: 4.03.R11.4912720B.11201.142300.0000004 Affected: 4.03.R11.4912720D.11201.142300.0000004 Affected: 4.03.R11.4915714A.12201.142300.0000000 Affected: 5.00.R02.00030751.10010.348717.0000000
Xiongmai	AHB7004T-GS-V3	Affected: 4.02.R11.24340142.10001.131900.00000 Affected: 4.02.R11.A8531149.10001.131900.00000 Affected: 4.02.R11.C6380171.11201.141900.00000 Affected: 4.03.R11.0000020X.11201.042300.0000005 Affected: 4.03.R11.4912720B.11201.142300.0000004 Affected: 4.03.R11.4912720D.11201.142300.0000004 Affected: 4.03.R11.4915714A.12201.142300.0000000 Affected: 5.00.R02.00030751.10010.348717.0000000
Xiongmai	AHB7004T-MHV2	Affected: 4.02.R11.24340142.10001.131900.00000 Affected: 4.02.R11.A8531149.10001.131900.00000 Affected: 4.02.R11.C6380171.11201.141900.00000 Affected: 4.03.R11.0000020X.11201.042300.0000005 Affected: 4.03.R11.4912720B.11201.142300.0000004 Affected: 4.03.R11.4912720D.11201.142300.0000004 Affected: 4.03.R11.4915714A.12201.142300.0000000 Affected: 5.00.R02.00030751.10010.348717.0000000
Xiongmai	AHB8032F-LME	Affected: 4.02.R11.24340142.10001.131900.00000 Affected: 4.02.R11.A8531149.10001.131900.00000 Affected: 4.02.R11.C6380171.11201.141900.00000 Affected: 4.03.R11.0000020X.11201.042300.0000005 Affected: 4.03.R11.4912720B.11201.142300.0000004 Affected: 4.03.R11.4912720D.11201.142300.0000004 Affected: 4.03.R11.4915714A.12201.142300.0000000 Affected: 5.00.R02.00030751.10010.348717.0000000
Xiongmai	XM530_R80X30-PQ_8M	Affected: 4.02.R11.24340142.10001.131900.00000 Affected: 4.02.R11.A8531149.10001.131900.00000 Affected: 4.02.R11.C6380171.11201.141900.00000 Affected: 4.03.R11.0000020X.11201.042300.0000005 Affected: 4.03.R11.4912720B.11201.142300.0000004 Affected: 4.03.R11.4912720D.11201.142300.0000004 Affected: 4.03.R11.4915714A.12201.142300.0000000 Affected: 5.00.R02.00030751.10010.348717.0000000
xiongmaitech	ahb7804r-mh-v2_firmware	Affected: 4.02.r11.24340142.10001.131900.00000 Affected: 4.02.r11.a8531149.10001.131900.00000 Affected: 4.02.r11.c6380171.11201.141900.00000 Affected: 4.03.r11.0000020x.11201.042300.0000005 Affected: 4.03.r11.4912720b.11201.142300.0000004 Affected: 4.03.r11.4912720d.11201.142300.0000004 Affected: 4.03.r11.4915714a.12201.142300.0000000 Affected: 5.00.r02.00030751.10010.348717.0000000 cpe:2.3:o:xiongmaitech:ahb7804r-mh-v2_firmware:4.02.r11.24340142.10001.131900.00000:::::::* cpe:2.3:o:xiongmaitech:ahb7804r-mh-v2_firmware:4.02.r11.a8531149.10001.131900.00000:::::::* cpe:2.3:o:xiongmaitech:ahb7804r-mh-v2_firmware:4.02.r11.c6380171.11201.141900.00000:::::::* cpe:2.3:o:xiongmaitech:ahb7804r-mh-v2_firmware:4.03.r11.0000020x.11201.042300.0000005:::::::* cpe:2.3:o:xiongmaitech:ahb7804r-mh-v2_firmware:4.03.r11.4912720b.11201.142300.0000004:::::::* cpe:2.3:o:xiongmaitech:ahb7804r-mh-v2_firmware:4.03.r11.4912720d.11201.142300.0000004:::::::* cpe:2.3:o:xiongmaitech:ahb7804r-mh-v2_firmware:4.03.r11.4915714a.12201.142300.0000000:::::::* cpe:2.3:o:xiongmaitech:ahb7804r-mh-v2_firmware:5.00.r02.00030751.10010.348717.0000000:::::::*
xiongmaitech	ahb8008t-gl_firmware	Affected: 4.03.r11.4915714a.12201.142300.0000000 cpe:2.3:o:xiongmaitech:ahb8008t-gl_firmware:4.03.r11.4915714a.12201.142300.0000000:::::::*
xiongmaitech	ahb8008t-gl_firmware	Affected: 4.02.r11.a8531149.10001.131900.00000 cpe:2.3:o:xiongmaitech:ahb8008t-gl_firmware:4.02.r11.a8531149.10001.131900.00000:::::::*
xiongmaitech	ahb8008t-gl_firmware	Affected: 4.03.r11.4912720b.11201.142300.0000004 cpe:2.3:o:xiongmaitech:ahb8008t-gl_firmware:4.03.r11.4912720b.11201.142300.0000004:::::::*
xiongmaitech	ahb8008t-gl_firmware	Affected: 4.03.r11.4912720d.11201.142300.0000004 cpe:2.3:o:xiongmaitech:ahb8008t-gl_firmware:4.03.r11.4912720d.11201.142300.0000004:::::::*
xiongmaitech	ahb8008t-gl_firmware	Affected: 5.00.r02.00030751.10010.348717.0000000 cpe:2.3:o:xiongmaitech:ahb8008t-gl_firmware:5.00.r02.00030751.10010.348717.0000000:::::::*
xiongmaitech	ahb8008t-gl_firmware	Affected: 4.02.r11.c6380171.11201.141900.00000 cpe:2.3:o:xiongmaitech:ahb8008t-gl_firmware:4.02.r11.c6380171.11201.141900.00000:::::::*
xiongmaitech	ahb8008t-gl_firmware	Affected: 4.03.r11.0000020x.11201.042300.0000005 cpe:2.3:o:xiongmaitech:ahb8008t-gl_firmware:4.03.r11.0000020x.11201.042300.0000005:::::::*
xiongmaitech	ahb8008t-gl_firmware	Affected: 4.02.r11.24340142.10001.131900.00000 cpe:2.3:o:xiongmaitech:ahb8008t-gl_firmware:4.02.r11.24340142.10001.131900.00000:::::::*
xiongmaitech	ahb8004t-gl_firmware	Affected: 4.03.r11.4915714a.12201.142300.0000000 cpe:2.3:o:xiongmaitech:ahb8004t-gl_firmware:4.03.r11.4915714a.12201.142300.0000000:::::::*
xiongmaitech	ahb8004t-gl_firmware	Affected: 4.02.r11.a8531149.10001.131900.00000 cpe:2.3:o:xiongmaitech:ahb8004t-gl_firmware:4.02.r11.a8531149.10001.131900.00000:::::::*
xiongmaitech	ahb8004t-gl_firmware	Affected: 4.03.r11.4912720b.11201.142300.0000004 cpe:2.3:o:xiongmaitech:ahb8004t-gl_firmware:4.03.r11.4912720b.11201.142300.0000004:::::::*
xiongmaitech	ahb8004t-gl_firmware	Affected: 4.03.r11.4912720d.11201.142300.0000004 cpe:2.3:o:xiongmaitech:ahb8004t-gl_firmware:4.03.r11.4912720d.11201.142300.0000004:::::::*
xiongmaitech	ahb8004t-gl_firmware	Affected: 5.00.r02.00030751.10010.348717.0000000 cpe:2.3:o:xiongmaitech:ahb8004t-gl_firmware:5.00.r02.00030751.10010.348717.0000000:::::::*
xiongmaitech	ahb8004t-gl_firmware	Affected: 4.02.r11.c6380171.11201.141900.00000 cpe:2.3:o:xiongmaitech:ahb8004t-gl_firmware:4.02.r11.c6380171.11201.141900.00000:::::::*
xiongmaitech	ahb8004t-gl_firmware	Affected: 4.03.r11.0000020x.11201.042300.0000005 cpe:2.3:o:xiongmaitech:ahb8004t-gl_firmware:4.03.r11.0000020x.11201.042300.0000005:::::::*
xiongmaitech	ahb8004t-gl_firmware	Affected: 4.02.r11.24340142.10001.131900.00000 cpe:2.3:o:xiongmaitech:ahb8004t-gl_firmware:4.02.r11.24340142.10001.131900.00000:::::::*
xiongmaitech	xm530_r80x30-pq_8m_firmware	Affected: 4.03.r11.4915714a.12201.142300.0000000 cpe:2.3:o:xiongmaitech:xm530_r80x30-pq_8m_firmware:4.03.r11.4915714a.12201.142300.0000000:::::::*
xiongmaitech	xm530_r80x30-pq_8m_firmware	Affected: 4.02.r11.a8531149.10001.131900.00000 cpe:2.3:o:xiongmaitech:xm530_r80x30-pq_8m_firmware:4.02.r11.a8531149.10001.131900.00000:::::::*
xiongmaitech	xm530_r80x30-pq_8m_firmware	Affected: 4.03.r11.4912720b.11201.142300.0000004 cpe:2.3:o:xiongmaitech:xm530_r80x30-pq_8m_firmware:4.03.r11.4912720b.11201.142300.0000004:::::::*
xiongmaitech	xm530_r80x30-pq_8m_firmware	Affected: 4.03.r11.4912720d.11201.142300.0000004 cpe:2.3:o:xiongmaitech:xm530_r80x30-pq_8m_firmware:4.03.r11.4912720d.11201.142300.0000004:::::::*
xiongmaitech	xm530_r80x30-pq_8m_firmware	Affected: 5.00.r02.00030751.10010.348717.0000000 cpe:2.3:o:xiongmaitech:xm530_r80x30-pq_8m_firmware:5.00.r02.00030751.10010.348717.0000000:::::::*
xiongmaitech	xm530_r80x30-pq_8m_firmware	Affected: 4.02.r11.c6380171.11201.141900.00000 cpe:2.3:o:xiongmaitech:xm530_r80x30-pq_8m_firmware:4.02.r11.c6380171.11201.141900.00000:::::::*
xiongmaitech	xm530_r80x30-pq_8m_firmware	Affected: 4.03.r11.0000020x.11201.042300.0000005 cpe:2.3:o:xiongmaitech:xm530_r80x30-pq_8m_firmware:4.03.r11.0000020x.11201.042300.0000005:::::::*
xiongmaitech	xm530_r80x30-pq_8m_firmware	Affected: 4.02.r11.24340142.10001.131900.00000 cpe:2.3:o:xiongmaitech:xm530_r80x30-pq_8m_firmware:4.02.r11.24340142.10001.131900.00000:::::::*
xiongmaitech	ahb7004t-gs-v3_firmware	Affected: 4.03.r11.4915714a.12201.142300.0000000 cpe:2.3:o:xiongmaitech:ahb7004t-gs-v3_firmware:4.03.r11.4915714a.12201.142300.0000000:::::::*
xiongmaitech	ahb7004t-gs-v3_firmware	Affected: 4.02.r11.a8531149.10001.131900.00000 cpe:2.3:o:xiongmaitech:ahb7004t-gs-v3_firmware:4.02.r11.a8531149.10001.131900.00000:::::::*
xiongmaitech	ahb7004t-gs-v3_firmware	Affected: 4.03.r11.4912720b.11201.142300.0000004 cpe:2.3:o:xiongmaitech:ahb7004t-gs-v3_firmware:4.03.r11.4912720b.11201.142300.0000004:::::::*
xiongmaitech	ahb7004t-gs-v3_firmware	Affected: 4.03.r11.4912720d.11201.142300.0000004 cpe:2.3:o:xiongmaitech:ahb7004t-gs-v3_firmware:4.03.r11.4912720d.11201.142300.0000004:::::::*
xiongmaitech	ahb7004t-gs-v3_firmware	Affected: 5.00.r02.00030751.10010.348717.0000000 cpe:2.3:o:xiongmaitech:ahb7004t-gs-v3_firmware:5.00.r02.00030751.10010.348717.0000000:::::::*
xiongmaitech	ahb7004t-gs-v3_firmware	Affected: 4.02.r11.c6380171.11201.141900.00000 cpe:2.3:o:xiongmaitech:ahb7004t-gs-v3_firmware:4.02.r11.c6380171.11201.141900.00000:::::::*
xiongmaitech	ahb7004t-gs-v3_firmware	Affected: 4.03.r11.0000020x.11201.042300.0000005 cpe:2.3:o:xiongmaitech:ahb7004t-gs-v3_firmware:4.03.r11.0000020x.11201.042300.0000005:::::::*
xiongmaitech	ahb7004t-gs-v3_firmware	Affected: 4.02.r11.24340142.10001.131900.00000 cpe:2.3:o:xiongmaitech:ahb7004t-gs-v3_firmware:4.02.r11.24340142.10001.131900.00000:::::::*
xiongmaitech	ahb8032f-lme_firmware	Affected: 4.03.r11.4915714a.12201.142300.0000000 cpe:2.3:o:xiongmaitech:ahb8032f-lme_firmware:4.03.r11.4915714a.12201.142300.0000000:::::::*
xiongmaitech	ahb8032f-lme_firmware	Affected: 4.02.r11.a8531149.10001.131900.00000 cpe:2.3:o:xiongmaitech:ahb8032f-lme_firmware:4.02.r11.a8531149.10001.131900.00000:::::::*
xiongmaitech	ahb8032f-lme_firmware	Affected: 4.03.r11.4912720b.11201.142300.0000004 cpe:2.3:o:xiongmaitech:ahb8032f-lme_firmware:4.03.r11.4912720b.11201.142300.0000004:::::::*
xiongmaitech	ahb8032f-lme_firmware	Affected: 4.03.r11.4912720d.11201.142300.0000004 cpe:2.3:o:xiongmaitech:ahb8032f-lme_firmware:4.03.r11.4912720d.11201.142300.0000004:::::::*
xiongmaitech	ahb8032f-lme_firmware	Affected: 5.00.r02.00030751.10010.348717.0000000 cpe:2.3:o:xiongmaitech:ahb8032f-lme_firmware:5.00.r02.00030751.10010.348717.0000000:::::::*
xiongmaitech	ahb8032f-lme_firmware	Affected: 4.02.r11.c6380171.11201.141900.00000 cpe:2.3:o:xiongmaitech:ahb8032f-lme_firmware:4.02.r11.c6380171.11201.141900.00000:::::::*
xiongmaitech	ahb8032f-lme_firmware	Affected: 4.03.r11.0000020x.11201.042300.0000005 cpe:2.3:o:xiongmaitech:ahb8032f-lme_firmware:4.03.r11.0000020x.11201.042300.0000005:::::::*
xiongmaitech	ahb8032f-lme_firmware	Affected: 4.02.r11.24340142.10001.131900.00000 cpe:2.3:o:xiongmaitech:ahb8032f-lme_firmware:4.02.r11.24340142.10001.131900.00000:::::::*
xiongmaitech	ahb7004t-mhv2_firmware	Affected: 4.03.r11.4915714a.12201.142300.0000000 cpe:2.3:o:xiongmaitech:ahb7004t-mhv2_firmware:4.03.r11.4915714a.12201.142300.0000000:::::::*
xiongmaitech	ahb7004t-mhv2_firmware	Affected: 4.02.r11.a8531149.10001.131900.00000 cpe:2.3:o:xiongmaitech:ahb7004t-mhv2_firmware:4.02.r11.a8531149.10001.131900.00000:::::::*
xiongmaitech	ahb7004t-mhv2_firmware	Affected: 4.03.r11.4912720b.11201.142300.0000004 cpe:2.3:o:xiongmaitech:ahb7004t-mhv2_firmware:4.03.r11.4912720b.11201.142300.0000004:::::::*
xiongmaitech	ahb7004t-mhv2_firmware	Affected: 4.03.r11.4912720d.11201.142300.0000004 cpe:2.3:o:xiongmaitech:ahb7004t-mhv2_firmware:4.03.r11.4912720d.11201.142300.0000004:::::::*
xiongmaitech	ahb7004t-mhv2_firmware	Affected: 5.00.r02.00030751.10010.348717.0000000 cpe:2.3:o:xiongmaitech:ahb7004t-mhv2_firmware:5.00.r02.00030751.10010.348717.0000000:::::::*
xiongmaitech	ahb7004t-mhv2_firmware	Affected: 4.02.r11.c6380171.11201.141900.00000 cpe:2.3:o:xiongmaitech:ahb7004t-mhv2_firmware:4.02.r11.c6380171.11201.141900.00000:::::::*
xiongmaitech	ahb7004t-mhv2_firmware	Affected: 4.03.r11.0000020x.11201.042300.0000005 cpe:2.3:o:xiongmaitech:ahb7004t-mhv2_firmware:4.03.r11.0000020x.11201.042300.0000005:::::::*
xiongmaitech	ahb7004t-mhv2_firmware	Affected: 4.02.r11.24340142.10001.131900.00000 cpe:2.3:o:xiongmaitech:ahb7004t-mhv2_firmware:4.02.r11.24340142.10001.131900.00000:::::::*

Credits

netsecfish (VulDB User)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T20:20:01.820Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "VDB-260605 | Xiongmai AHB7804R-MH-V2 Sofia Service access control",
            "tags": [
              "vdb-entry",
              "technical-description",
              "mitigation",
              "x_transferred"
            ],
            "url": "https://vuldb.com/?id.260605"
          },
          {
            "name": "VDB-260605 | CTI Indicators (IOB, IOC, TTP, IOA)",
            "tags": [
              "signature",
              "permissions-required",
              "x_transferred"
            ],
            "url": "https://vuldb.com/?ctiid.260605"
          },
          {
            "name": "Submit #311903 | Xiongmai AHB7804R-MH-V2, AHB8008T-GL, AHB8004T-GL, XM530_R80X30-PQ_8M, AHB7004T-GS-V3, AHB8032F-LME, AHB7004T-MHV2 V4.03.R11.4915714A.12201.142300.0000000, V4.02.R11.A8531149.10001.131900.00000, V4.03.R11.4912720B.11201.142300.0000004, V4.03.R Incorrect A",
            "tags": [
              "third-party-advisory",
              "x_transferred"
            ],
            "url": "https://vuldb.com/?submit.311903"
          },
          {
            "tags": [
              "related",
              "x_transferred"
            ],
            "url": "https://github.com/netsecfish/xiongmai_incorrect_access_control"
          },
          {
            "tags": [
              "exploit",
              "x_transferred"
            ],
            "url": "https://github.com/netsecfish/xiongmai_incorrect_access_control/blob/main/pocCheck3-en.py"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb7804r-mh-v2_firmware:4.02.r11.24340142.10001.131900.00000:*:*:*:*:*:*:*",
              "cpe:2.3:o:xiongmaitech:ahb7804r-mh-v2_firmware:4.02.r11.a8531149.10001.131900.00000:*:*:*:*:*:*:*",
              "cpe:2.3:o:xiongmaitech:ahb7804r-mh-v2_firmware:4.02.r11.c6380171.11201.141900.00000:*:*:*:*:*:*:*",
              "cpe:2.3:o:xiongmaitech:ahb7804r-mh-v2_firmware:4.03.r11.0000020x.11201.042300.0000005:*:*:*:*:*:*:*",
              "cpe:2.3:o:xiongmaitech:ahb7804r-mh-v2_firmware:4.03.r11.4912720b.11201.142300.0000004:*:*:*:*:*:*:*",
              "cpe:2.3:o:xiongmaitech:ahb7804r-mh-v2_firmware:4.03.r11.4912720d.11201.142300.0000004:*:*:*:*:*:*:*",
              "cpe:2.3:o:xiongmaitech:ahb7804r-mh-v2_firmware:4.03.r11.4915714a.12201.142300.0000000:*:*:*:*:*:*:*",
              "cpe:2.3:o:xiongmaitech:ahb7804r-mh-v2_firmware:5.00.r02.00030751.10010.348717.0000000:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb7804r-mh-v2_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.02.r11.24340142.10001.131900.00000"
              },
              {
                "status": "affected",
                "version": "4.02.r11.a8531149.10001.131900.00000"
              },
              {
                "status": "affected",
                "version": "4.02.r11.c6380171.11201.141900.00000"
              },
              {
                "status": "affected",
                "version": "4.03.r11.0000020x.11201.042300.0000005"
              },
              {
                "status": "affected",
                "version": "4.03.r11.4912720b.11201.142300.0000004"
              },
              {
                "status": "affected",
                "version": "4.03.r11.4912720d.11201.142300.0000004"
              },
              {
                "status": "affected",
                "version": "4.03.r11.4915714a.12201.142300.0000000"
              },
              {
                "status": "affected",
                "version": "5.00.r02.00030751.10010.348717.0000000"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb8008t-gl_firmware:4.03.r11.4915714a.12201.142300.0000000:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb8008t-gl_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.03.r11.4915714a.12201.142300.0000000"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb8008t-gl_firmware:4.02.r11.a8531149.10001.131900.00000:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb8008t-gl_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.02.r11.a8531149.10001.131900.00000"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb8008t-gl_firmware:4.03.r11.4912720b.11201.142300.0000004:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb8008t-gl_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.03.r11.4912720b.11201.142300.0000004"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb8008t-gl_firmware:4.03.r11.4912720d.11201.142300.0000004:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb8008t-gl_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.03.r11.4912720d.11201.142300.0000004"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb8008t-gl_firmware:5.00.r02.00030751.10010.348717.0000000:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb8008t-gl_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "5.00.r02.00030751.10010.348717.0000000"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb8008t-gl_firmware:4.02.r11.c6380171.11201.141900.00000:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb8008t-gl_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.02.r11.c6380171.11201.141900.00000"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb8008t-gl_firmware:4.03.r11.0000020x.11201.042300.0000005:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb8008t-gl_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.03.r11.0000020x.11201.042300.0000005"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb8008t-gl_firmware:4.02.r11.24340142.10001.131900.00000:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb8008t-gl_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.02.r11.24340142.10001.131900.00000"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb8004t-gl_firmware:4.03.r11.4915714a.12201.142300.0000000:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb8004t-gl_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.03.r11.4915714a.12201.142300.0000000"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb8004t-gl_firmware:4.02.r11.a8531149.10001.131900.00000:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb8004t-gl_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.02.r11.a8531149.10001.131900.00000"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb8004t-gl_firmware:4.03.r11.4912720b.11201.142300.0000004:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb8004t-gl_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.03.r11.4912720b.11201.142300.0000004"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb8004t-gl_firmware:4.03.r11.4912720d.11201.142300.0000004:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb8004t-gl_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.03.r11.4912720d.11201.142300.0000004"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb8004t-gl_firmware:5.00.r02.00030751.10010.348717.0000000:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb8004t-gl_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "5.00.r02.00030751.10010.348717.0000000"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb8004t-gl_firmware:4.02.r11.c6380171.11201.141900.00000:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb8004t-gl_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.02.r11.c6380171.11201.141900.00000"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb8004t-gl_firmware:4.03.r11.0000020x.11201.042300.0000005:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb8004t-gl_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.03.r11.0000020x.11201.042300.0000005"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb8004t-gl_firmware:4.02.r11.24340142.10001.131900.00000:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb8004t-gl_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.02.r11.24340142.10001.131900.00000"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:xm530_r80x30-pq_8m_firmware:4.03.r11.4915714a.12201.142300.0000000:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "xm530_r80x30-pq_8m_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.03.r11.4915714a.12201.142300.0000000"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:xm530_r80x30-pq_8m_firmware:4.02.r11.a8531149.10001.131900.00000:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "xm530_r80x30-pq_8m_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.02.r11.a8531149.10001.131900.00000"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:xm530_r80x30-pq_8m_firmware:4.03.r11.4912720b.11201.142300.0000004:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "xm530_r80x30-pq_8m_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.03.r11.4912720b.11201.142300.0000004"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:xm530_r80x30-pq_8m_firmware:4.03.r11.4912720d.11201.142300.0000004:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "xm530_r80x30-pq_8m_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.03.r11.4912720d.11201.142300.0000004"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:xm530_r80x30-pq_8m_firmware:5.00.r02.00030751.10010.348717.0000000:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "xm530_r80x30-pq_8m_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "5.00.r02.00030751.10010.348717.0000000"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:xm530_r80x30-pq_8m_firmware:4.02.r11.c6380171.11201.141900.00000:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "xm530_r80x30-pq_8m_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.02.r11.c6380171.11201.141900.00000"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:xm530_r80x30-pq_8m_firmware:4.03.r11.0000020x.11201.042300.0000005:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "xm530_r80x30-pq_8m_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.03.r11.0000020x.11201.042300.0000005"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:xm530_r80x30-pq_8m_firmware:4.02.r11.24340142.10001.131900.00000:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "xm530_r80x30-pq_8m_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.02.r11.24340142.10001.131900.00000"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb7004t-gs-v3_firmware:4.03.r11.4915714a.12201.142300.0000000:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb7004t-gs-v3_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.03.r11.4915714a.12201.142300.0000000"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb7004t-gs-v3_firmware:4.02.r11.a8531149.10001.131900.00000:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb7004t-gs-v3_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.02.r11.a8531149.10001.131900.00000"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb7004t-gs-v3_firmware:4.03.r11.4912720b.11201.142300.0000004:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb7004t-gs-v3_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.03.r11.4912720b.11201.142300.0000004"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb7004t-gs-v3_firmware:4.03.r11.4912720d.11201.142300.0000004:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb7004t-gs-v3_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.03.r11.4912720d.11201.142300.0000004"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb7004t-gs-v3_firmware:5.00.r02.00030751.10010.348717.0000000:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb7004t-gs-v3_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "5.00.r02.00030751.10010.348717.0000000"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb7004t-gs-v3_firmware:4.02.r11.c6380171.11201.141900.00000:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb7004t-gs-v3_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.02.r11.c6380171.11201.141900.00000"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb7004t-gs-v3_firmware:4.03.r11.0000020x.11201.042300.0000005:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb7004t-gs-v3_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.03.r11.0000020x.11201.042300.0000005"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb7004t-gs-v3_firmware:4.02.r11.24340142.10001.131900.00000:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb7004t-gs-v3_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.02.r11.24340142.10001.131900.00000"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb8032f-lme_firmware:4.03.r11.4915714a.12201.142300.0000000:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb8032f-lme_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.03.r11.4915714a.12201.142300.0000000"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb8032f-lme_firmware:4.02.r11.a8531149.10001.131900.00000:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb8032f-lme_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.02.r11.a8531149.10001.131900.00000"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb8032f-lme_firmware:4.03.r11.4912720b.11201.142300.0000004:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb8032f-lme_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.03.r11.4912720b.11201.142300.0000004"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb8032f-lme_firmware:4.03.r11.4912720d.11201.142300.0000004:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb8032f-lme_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.03.r11.4912720d.11201.142300.0000004"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb8032f-lme_firmware:5.00.r02.00030751.10010.348717.0000000:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb8032f-lme_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "5.00.r02.00030751.10010.348717.0000000"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb8032f-lme_firmware:4.02.r11.c6380171.11201.141900.00000:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb8032f-lme_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.02.r11.c6380171.11201.141900.00000"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb8032f-lme_firmware:4.03.r11.0000020x.11201.042300.0000005:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb8032f-lme_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.03.r11.0000020x.11201.042300.0000005"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb8032f-lme_firmware:4.02.r11.24340142.10001.131900.00000:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb8032f-lme_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.02.r11.24340142.10001.131900.00000"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb7004t-mhv2_firmware:4.03.r11.4915714a.12201.142300.0000000:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb7004t-mhv2_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.03.r11.4915714a.12201.142300.0000000"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb7004t-mhv2_firmware:4.02.r11.a8531149.10001.131900.00000:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb7004t-mhv2_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.02.r11.a8531149.10001.131900.00000"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb7004t-mhv2_firmware:4.03.r11.4912720b.11201.142300.0000004:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb7004t-mhv2_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.03.r11.4912720b.11201.142300.0000004"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb7004t-mhv2_firmware:4.03.r11.4912720d.11201.142300.0000004:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb7004t-mhv2_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.03.r11.4912720d.11201.142300.0000004"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb7004t-mhv2_firmware:5.00.r02.00030751.10010.348717.0000000:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb7004t-mhv2_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "5.00.r02.00030751.10010.348717.0000000"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb7004t-mhv2_firmware:4.02.r11.c6380171.11201.141900.00000:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb7004t-mhv2_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.02.r11.c6380171.11201.141900.00000"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb7004t-mhv2_firmware:4.03.r11.0000020x.11201.042300.0000005:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb7004t-mhv2_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.03.r11.0000020x.11201.042300.0000005"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:xiongmaitech:ahb7004t-mhv2_firmware:4.02.r11.24340142.10001.131900.00000:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahb7004t-mhv2_firmware",
            "vendor": "xiongmaitech",
            "versions": [
              {
                "status": "affected",
                "version": "4.02.r11.24340142.10001.131900.00000"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-3765",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-04-15T13:40:05.259780Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-08-08T20:19:23.996Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "modules": [
            "Sofia Service"
          ],
          "product": "AHB7804R-MH-V2",
          "vendor": "Xiongmai",
          "versions": [
            {
              "status": "affected",
              "version": "4.02.R11.24340142.10001.131900.00000"
            },
            {
              "status": "affected",
              "version": "4.02.R11.A8531149.10001.131900.00000"
            },
            {
              "status": "affected",
              "version": "4.02.R11.C6380171.11201.141900.00000"
            },
            {
              "status": "affected",
              "version": "4.03.R11.0000020X.11201.042300.0000005"
            },
            {
              "status": "affected",
              "version": "4.03.R11.4912720B.11201.142300.0000004"
            },
            {
              "status": "affected",
              "version": "4.03.R11.4912720D.11201.142300.0000004"
            },
            {
              "status": "affected",
              "version": "4.03.R11.4915714A.12201.142300.0000000"
            },
            {
              "status": "affected",
              "version": "5.00.R02.00030751.10010.348717.0000000"
            }
          ]
        },
        {
          "modules": [
            "Sofia Service"
          ],
          "product": "AHB8004T-GL",
          "vendor": "Xiongmai",
          "versions": [
            {
              "status": "affected",
              "version": "4.02.R11.24340142.10001.131900.00000"
            },
            {
              "status": "affected",
              "version": "4.02.R11.A8531149.10001.131900.00000"
            },
            {
              "status": "affected",
              "version": "4.02.R11.C6380171.11201.141900.00000"
            },
            {
              "status": "affected",
              "version": "4.03.R11.0000020X.11201.042300.0000005"
            },
            {
              "status": "affected",
              "version": "4.03.R11.4912720B.11201.142300.0000004"
            },
            {
              "status": "affected",
              "version": "4.03.R11.4912720D.11201.142300.0000004"
            },
            {
              "status": "affected",
              "version": "4.03.R11.4915714A.12201.142300.0000000"
            },
            {
              "status": "affected",
              "version": "5.00.R02.00030751.10010.348717.0000000"
            }
          ]
        },
        {
          "modules": [
            "Sofia Service"
          ],
          "product": "AHB8008T-GL",
          "vendor": "Xiongmai",
          "versions": [
            {
              "status": "affected",
              "version": "4.02.R11.24340142.10001.131900.00000"
            },
            {
              "status": "affected",
              "version": "4.02.R11.A8531149.10001.131900.00000"
            },
            {
              "status": "affected",
              "version": "4.02.R11.C6380171.11201.141900.00000"
            },
            {
              "status": "affected",
              "version": "4.03.R11.0000020X.11201.042300.0000005"
            },
            {
              "status": "affected",
              "version": "4.03.R11.4912720B.11201.142300.0000004"
            },
            {
              "status": "affected",
              "version": "4.03.R11.4912720D.11201.142300.0000004"
            },
            {
              "status": "affected",
              "version": "4.03.R11.4915714A.12201.142300.0000000"
            },
            {
              "status": "affected",
              "version": "5.00.R02.00030751.10010.348717.0000000"
            }
          ]
        },
        {
          "modules": [
            "Sofia Service"
          ],
          "product": "AHB7004T-GS-V3",
          "vendor": "Xiongmai",
          "versions": [
            {
              "status": "affected",
              "version": "4.02.R11.24340142.10001.131900.00000"
            },
            {
              "status": "affected",
              "version": "4.02.R11.A8531149.10001.131900.00000"
            },
            {
              "status": "affected",
              "version": "4.02.R11.C6380171.11201.141900.00000"
            },
            {
              "status": "affected",
              "version": "4.03.R11.0000020X.11201.042300.0000005"
            },
            {
              "status": "affected",
              "version": "4.03.R11.4912720B.11201.142300.0000004"
            },
            {
              "status": "affected",
              "version": "4.03.R11.4912720D.11201.142300.0000004"
            },
            {
              "status": "affected",
              "version": "4.03.R11.4915714A.12201.142300.0000000"
            },
            {
              "status": "affected",
              "version": "5.00.R02.00030751.10010.348717.0000000"
            }
          ]
        },
        {
          "modules": [
            "Sofia Service"
          ],
          "product": "AHB7004T-MHV2",
          "vendor": "Xiongmai",
          "versions": [
            {
              "status": "affected",
              "version": "4.02.R11.24340142.10001.131900.00000"
            },
            {
              "status": "affected",
              "version": "4.02.R11.A8531149.10001.131900.00000"
            },
            {
              "status": "affected",
              "version": "4.02.R11.C6380171.11201.141900.00000"
            },
            {
              "status": "affected",
              "version": "4.03.R11.0000020X.11201.042300.0000005"
            },
            {
              "status": "affected",
              "version": "4.03.R11.4912720B.11201.142300.0000004"
            },
            {
              "status": "affected",
              "version": "4.03.R11.4912720D.11201.142300.0000004"
            },
            {
              "status": "affected",
              "version": "4.03.R11.4915714A.12201.142300.0000000"
            },
            {
              "status": "affected",
              "version": "5.00.R02.00030751.10010.348717.0000000"
            }
          ]
        },
        {
          "modules": [
            "Sofia Service"
          ],
          "product": "AHB8032F-LME",
          "vendor": "Xiongmai",
          "versions": [
            {
              "status": "affected",
              "version": "4.02.R11.24340142.10001.131900.00000"
            },
            {
              "status": "affected",
              "version": "4.02.R11.A8531149.10001.131900.00000"
            },
            {
              "status": "affected",
              "version": "4.02.R11.C6380171.11201.141900.00000"
            },
            {
              "status": "affected",
              "version": "4.03.R11.0000020X.11201.042300.0000005"
            },
            {
              "status": "affected",
              "version": "4.03.R11.4912720B.11201.142300.0000004"
            },
            {
              "status": "affected",
              "version": "4.03.R11.4912720D.11201.142300.0000004"
            },
            {
              "status": "affected",
              "version": "4.03.R11.4915714A.12201.142300.0000000"
            },
            {
              "status": "affected",
              "version": "5.00.R02.00030751.10010.348717.0000000"
            }
          ]
        },
        {
          "modules": [
            "Sofia Service"
          ],
          "product": "XM530_R80X30-PQ_8M",
          "vendor": "Xiongmai",
          "versions": [
            {
              "status": "affected",
              "version": "4.02.R11.24340142.10001.131900.00000"
            },
            {
              "status": "affected",
              "version": "4.02.R11.A8531149.10001.131900.00000"
            },
            {
              "status": "affected",
              "version": "4.02.R11.C6380171.11201.141900.00000"
            },
            {
              "status": "affected",
              "version": "4.03.R11.0000020X.11201.042300.0000005"
            },
            {
              "status": "affected",
              "version": "4.03.R11.4912720B.11201.142300.0000004"
            },
            {
              "status": "affected",
              "version": "4.03.R11.4912720D.11201.142300.0000004"
            },
            {
              "status": "affected",
              "version": "4.03.R11.4915714A.12201.142300.0000000"
            },
            {
              "status": "affected",
              "version": "5.00.R02.00030751.10010.348717.0000000"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "netsecfish (VulDB User)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability classified as critical was found in Xiongmai AHB7804R-MH-V2, AHB8004T-GL, AHB8008T-GL, AHB7004T-GS-V3, AHB7004T-MHV2, AHB8032F-LME and XM530_R80X30-PQ_8M. Affected by this vulnerability is an unknown functionality of the component Sofia Service. The manipulation with the input ff00000000000000000000000000f103250000007b202252657422203a203130302c202253657373696f6e494422203a202230783022207d0a leads to improper access controls. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-260605 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way."
        },
        {
          "lang": "de",
          "value": "In Xiongmai AHB7804R-MH-V2, AHB8004T-GL, AHB8008T-GL, AHB7004T-GS-V3, AHB7004T-MHV2, AHB8032F-LME and XM530_R80X30-PQ_8M wurde eine kritische Schwachstelle entdeckt. Es geht um eine nicht n\u00e4her bekannte Funktion der Komponente Sofia Service. Durch Manipulation mit der Eingabe ff00000000000000000000000000f103250000007b202252657422203a203130302c202253657373696f6e494422203a202230783022207d0a mit unbekannten Daten kann eine improper access controls-Schwachstelle ausgenutzt werden. Der Angriff kann \u00fcber das Netzwerk erfolgen. Der Exploit steht zur \u00f6ffentlichen Verf\u00fcgung."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        },
        {
          "cvssV3_0": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        },
        {
          "cvssV2_0": {
            "baseScore": 10,
            "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-284",
              "description": "CWE-284 Improper Access Controls",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-04-14T23:00:05.199Z",
        "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "shortName": "VulDB"
      },
      "references": [
        {
          "name": "VDB-260605 | Xiongmai AHB7804R-MH-V2 Sofia Service access control",
          "tags": [
            "vdb-entry",
            "technical-description",
            "mitigation"
          ],
          "url": "https://vuldb.com/?id.260605"
        },
        {
          "name": "VDB-260605 | CTI Indicators (IOB, IOC, TTP, IOA)",
          "tags": [
            "signature",
            "permissions-required"
          ],
          "url": "https://vuldb.com/?ctiid.260605"
        },
        {
          "name": "Submit #311903 | Xiongmai AHB7804R-MH-V2, AHB8008T-GL, AHB8004T-GL, XM530_R80X30-PQ_8M, AHB7004T-GS-V3, AHB8032F-LME, AHB7004T-MHV2 V4.03.R11.4915714A.12201.142300.0000000, V4.02.R11.A8531149.10001.131900.00000, V4.03.R11.4912720B.11201.142300.0000004, V4.03.R Incorrect A",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/?submit.311903"
        },
        {
          "tags": [
            "related"
          ],
          "url": "https://github.com/netsecfish/xiongmai_incorrect_access_control"
        },
        {
          "tags": [
            "exploit"
          ],
          "url": "https://github.com/netsecfish/xiongmai_incorrect_access_control/blob/main/pocCheck3-en.py"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2024-04-14T00:00:00.000Z",
          "value": "Advisory disclosed"
        },
        {
          "lang": "en",
          "time": "2024-04-14T02:00:00.000Z",
          "value": "VulDB entry created"
        },
        {
          "lang": "en",
          "time": "2024-04-14T10:50:01.000Z",
          "value": "VulDB entry last update"
        }
      ],
      "title": "Xiongmai AHB7804R-MH-V2 Sofia Service access control"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
    "assignerShortName": "VulDB",
    "cveId": "CVE-2024-3765",
    "datePublished": "2024-04-14T23:00:05.199Z",
    "dateReserved": "2024-04-14T08:43:42.949Z",
    "dateUpdated": "2024-08-08T20:19:23.996Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-17919 (GCVE-0-2018-17919)

Vulnerability from cvelistv5 – Published: 2018-10-10 15:00 – Updated: 2024-09-16 18:03

Summary

Severity

No CVSS data available.

CWE

CWE-912 - HIDDEN FUNCTIONALITY CWE-912

Assigner

icscert icscert root Scorecard

References

1 reference

URL	Tags
https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
Hangzhou Xiongmai Technology Co., Ltd	XMeye P2P Cloud Server	Affected: All versions

Date Public

2018-10-09 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T11:01:14.661Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "XMeye P2P Cloud Server",
          "vendor": "Hangzhou Xiongmai Technology Co., Ltd",
          "versions": [
            {
              "status": "affected",
              "version": "All versions"
            }
          ]
        }
      ],
      "datePublic": "2018-10-09T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server may allow an attacker to use an undocumented user account \"default\" with its default password to login to XMeye and access/view video streams."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-912",
              "description": "HIDDEN FUNCTIONALITY CWE-912",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-10T14:57:01.000Z",
        "orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
        "shortName": "icscert"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "ics-cert@hq.dhs.gov",
          "DATE_PUBLIC": "2018-10-09T00:00:00",
          "ID": "CVE-2018-17919",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "XMeye P2P Cloud Server",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Hangzhou Xiongmai Technology Co., Ltd"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server may allow an attacker to use an undocumented user account \"default\" with its default password to login to XMeye and access/view video streams."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "HIDDEN FUNCTIONALITY CWE-912"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06",
              "refsource": "MISC",
              "url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
    "assignerShortName": "icscert",
    "cveId": "CVE-2018-17919",
    "datePublished": "2018-10-10T15:00:00.000Z",
    "dateReserved": "2018-10-02T00:00:00.000Z",
    "dateUpdated": "2024-09-16T18:03:48.747Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-17915 (GCVE-0-2018-17915)

Vulnerability from cvelistv5 – Published: 2018-10-10 15:00 – Updated: 2024-09-16 22:56

Summary

Severity

No CVSS data available.

CWE

CWE-311 - MISSING ENCRYPTION OF SENSITIVE DATA CWE-311

Assigner

icscert icscert root Scorecard

References

1 reference

URL	Tags
https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
Hangzhou Xiongmai Technology Co., Ltd	XMeye P2P Cloud Server	Affected: All versions

Date Public

2018-10-09 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T11:01:14.678Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "XMeye P2P Cloud Server",
          "vendor": "Hangzhou Xiongmai Technology Co., Ltd",
          "versions": [
            {
              "status": "affected",
              "version": "All versions"
            }
          ]
        }
      ],
      "datePublic": "2018-10-09T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server do not encrypt all device communication. This includes the XMeye service and firmware update communication. This could allow an attacker to eavesdrop on video feeds, steal XMeye login credentials, or impersonate the update server with malicious update code."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-311",
              "description": "MISSING ENCRYPTION OF SENSITIVE DATA CWE-311",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-10T14:57:01.000Z",
        "orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
        "shortName": "icscert"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "ics-cert@hq.dhs.gov",
          "DATE_PUBLIC": "2018-10-09T00:00:00",
          "ID": "CVE-2018-17915",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "XMeye P2P Cloud Server",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Hangzhou Xiongmai Technology Co., Ltd"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server do not encrypt all device communication. This includes the XMeye service and firmware update communication. This could allow an attacker to eavesdrop on video feeds, steal XMeye login credentials, or impersonate the update server with malicious update code."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "MISSING ENCRYPTION OF SENSITIVE DATA CWE-311"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06",
              "refsource": "MISC",
              "url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
    "assignerShortName": "icscert",
    "cveId": "CVE-2018-17915",
    "datePublished": "2018-10-10T15:00:00.000Z",
    "dateReserved": "2018-10-02T00:00:00.000Z",
    "dateUpdated": "2024-09-16T22:56:29.656Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-17917 (GCVE-0-2018-17917)

Vulnerability from cvelistv5 – Published: 2018-10-10 15:00 – Updated: 2024-09-16 17:59

Summary

Severity

No CVSS data available.

CWE

CWE-341 - PREDICTABLE FROM OBSERVABLE STATE CWE-341

Assigner

icscert icscert root Scorecard

References

1 reference

URL	Tags
https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
Hangzhou Xiongmai Technology Co., Ltd	XMeye P2P Cloud Server	Affected: All versions

Date Public

2018-10-09 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T11:01:14.674Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "XMeye P2P Cloud Server",
          "vendor": "Hangzhou Xiongmai Technology Co., Ltd",
          "versions": [
            {
              "status": "affected",
              "version": "All versions"
            }
          ]
        }
      ],
      "datePublic": "2018-10-09T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server may allow an attacker to use MAC addresses to enumerate potential Cloud IDs. Using this ID, the attacker can discover and connect to valid devices using one of the supported apps."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-341",
              "description": "PREDICTABLE FROM OBSERVABLE STATE CWE-341",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-10T14:57:01.000Z",
        "orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
        "shortName": "icscert"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "ics-cert@hq.dhs.gov",
          "DATE_PUBLIC": "2018-10-09T00:00:00",
          "ID": "CVE-2018-17917",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "XMeye P2P Cloud Server",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Hangzhou Xiongmai Technology Co., Ltd"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server may allow an attacker to use MAC addresses to enumerate potential Cloud IDs. Using this ID, the attacker can discover and connect to valid devices using one of the supported apps."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "PREDICTABLE FROM OBSERVABLE STATE CWE-341"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06",
              "refsource": "MISC",
              "url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
    "assignerShortName": "icscert",
    "cveId": "CVE-2018-17917",
    "datePublished": "2018-10-10T15:00:00.000Z",
    "dateReserved": "2018-10-02T00:00:00.000Z",
    "dateUpdated": "2024-09-16T17:59:25.518Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-10088 (GCVE-0-2018-10088)

Vulnerability from cvelistv5 – Published: 2018-06-08 12:00 – Updated: 2024-08-05 07:32

Summary

Buffer overflow in XiongMai uc-httpd 1.0.0 has unspecified impact and attack vectors, a different vulnerability than CVE-2017-16725.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root Scorecard

References

2 references

URL	Tags
https://github.com/bitfu/uc-httpd-1.0.0-buffer-ov…	x_refsource_MISC
https://www.exploit-db.com/exploits/44864/	exploitx_refsource_EXPLOIT-DB

Date Public

2018-06-08 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T07:32:00.908Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/bitfu/uc-httpd-1.0.0-buffer-overflow-exploit"
          },
          {
            "name": "44864",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "https://www.exploit-db.com/exploits/44864/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-06-08T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Buffer overflow in XiongMai uc-httpd 1.0.0 has unspecified impact and attack vectors, a different vulnerability than CVE-2017-16725."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-06-10T09:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/bitfu/uc-httpd-1.0.0-buffer-overflow-exploit"
        },
        {
          "name": "44864",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "https://www.exploit-db.com/exploits/44864/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-10088",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Buffer overflow in XiongMai uc-httpd 1.0.0 has unspecified impact and attack vectors, a different vulnerability than CVE-2017-16725."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/bitfu/uc-httpd-1.0.0-buffer-overflow-exploit",
              "refsource": "MISC",
              "url": "https://github.com/bitfu/uc-httpd-1.0.0-buffer-overflow-exploit"
            },
            {
              "name": "44864",
              "refsource": "EXPLOIT-DB",
              "url": "https://www.exploit-db.com/exploits/44864/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-10088",
    "datePublished": "2018-06-08T12:00:00.000Z",
    "dateReserved": "2018-04-13T00:00:00.000Z",
    "dateUpdated": "2024-08-05T07:32:00.908Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-7577 (GCVE-0-2017-7577)

Vulnerability from cvelistv5 – Published: 2017-04-07 04:33 – Updated: 2024-08-05 16:04

Summary

XiongMai uc-httpd has directory traversal allowing the reading of arbitrary files via a "GET ../" HTTP request.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root Scorecard

References

1 reference

URL	Tags
http://zeroday.insecurity.zone/exploits/uc-httpd_…	x_refsource_MISC

Date Public

2017-04-06 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T16:04:12.111Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://zeroday.insecurity.zone/exploits/uc-httpd_lfi.txt"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-04-06T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "XiongMai uc-httpd has directory traversal allowing the reading of arbitrary files via a \"GET ../\" HTTP request."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-04-07T04:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://zeroday.insecurity.zone/exploits/uc-httpd_lfi.txt"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-7577",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "XiongMai uc-httpd has directory traversal allowing the reading of arbitrary files via a \"GET ../\" HTTP request."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://zeroday.insecurity.zone/exploits/uc-httpd_lfi.txt",
              "refsource": "MISC",
              "url": "http://zeroday.insecurity.zone/exploits/uc-httpd_lfi.txt"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2017-7577",
    "datePublished": "2017-04-07T04:33:00.000Z",
    "dateReserved": "2017-04-06T00:00:00.000Z",
    "dateUpdated": "2024-08-05T16:04:12.111Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}