Xiongmai devices come with a feature called XMeye P2P Cloud that allows users to access their IP cameras or NVRs/DVRs via the internet. The XMEye functionality allows an attacker to attack devices that are behind firewalls, NATed networks etc. This approach allows. users to connect to devices that. are behind NATed. networks. An attacker can enumerate potential MACs/cloud IDs and find valid ones. This allows the attacker to watch the video feed, change the device configuration and possibly gain remote code execution using other vulnerabilities.”]