#Is the xmeye app secure password

Researchers say Xiongmai devices firmware updates are not signed, and an attacker can easily impersonate the XMEye cloud and deliver a malicious firmware version that contains malware.

#Is the xmeye app secure password

Third, users aren't prompted to change this default password during the account setup process.Р”Р‡ourth, even if the user has changed the XMEye admin account password, there is also a second hidden account with the username and password combo of default/tluafed.Р”Р‡ifth, access to this account allows an attacker to trigger a firmware update.

Second, all new XMEye accounts use a default admin username of 'admin' with no password. For starters, an attacker can guess account IDs because they've been based on devices' sequential physical addresses (MACs). SEC Consult researchers say that these XMEye cloud accounts have not been sufficiently protected. Device owners can access this account via their browser or via a mobile app to view device video feeds in real time. The XMEye P2P Cloud works by creating a tunnel between a customer's device and an XMEye cloud account. The source of all vulnerabilities is a feature found in all devices named the 'XMEye P2P Cloud.' Security researchers from EU-based SEC Consult say they've identified over 100 companies that buy and re-brand Xiongmai devices as their own.Р”В¬NET: California governor signs country's first IoT security lawР”Р„ll of these devices are vulnerable to easy hacks, researchers say. (Xiongmai hereinafter), a Chinese company based in the city of Hangzhou.Р”В«ut end users won't be able to tell that they're using a hackable device because the company doesn't sell any products with its name on them, but ships all equipment as white label products on which other companies put their logo on top. Millions of security cameras, DVRs, and NVRs contain vulnerabilities that can allow a remote attacker to take over devices with little effort, security researchers have revealed today.Р”Р„ll vulnerable devices have been manufactured by Hangzhou Xiongmai Technology Co., Ltd.