Hangzhou Xiongmai Technology Co., Ltd — Vulnerabilities & Security Advisories 3

Hangzhou Xiongmai Technology Co., Ltd manufactures IoT devices, primarily surveillance cameras and related equipment, for global markets. The company has three CVEs on record, with historically common vulnerabilities including remote code execution (RCE) and cross-site scripting (XSS). These vulnerabilities often stem from hardcoded credentials, insecure web interfaces, and lack of proper input validation. Notable security characteristics include poor default configurations and insufficient firmware updates, leading to major incidents where compromised devices were used in large-scale DDoS attacks. Their products' widespread deployment and security shortcomings have made them frequent targets in botnet campaigns, highlighting systemic issues in IoT security practices.