CVE-2025-65856

CRITICAL

9.8

Beschreibung

Authentication bypass vulnerability in Xiongmai XM530 IP cameras on Firmware V5.00.R02.000807D8.10010.346624.S.ONVIF 21.06 allows unauthenticated remote attackers to access sensitive device information and live video streams. The ONVIF implementation fails to enforce authentication on 31 critical endpoints, enabling direct unauthorized video stream access.

CVE Details

CVSS v3.1 Bewertung9.8

SchweregradCRITICAL

CVSS VektorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AngriffsvektorNETWORK

KomplexitatLOW

Erforderliche PrivilegienNONE

BenutzerinteraktionNONE

Veroffentlicht12/22/2025

Zuletzt geandert1/5/2026

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

xiongmaitech:xm530v200_x6-weq_8mxiongmaitech:xm530v200_x6-weq_8m_firmware

Schwachen (CWE)

CWE-306

Referenzen

http://hangzhou.com(cve@mitre.org)

http://ip.com(cve@mitre.org)

https://luismirandaacebedo.github.io/CVE-2025-65856/(cve@mitre.org)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.