CVEvulnerability

CVE-2025-65856

9.8 CRITICAL Published 2025-12-22 Modified 2026-07-05 Official page ↗
Status
Modified
Published
2025-12-22
Last modified
2026-07-05
Assigner
[email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-306

Description

Authentication bypass vulnerability in Xiongmai XM530 IP cameras on Firmware V5.00.R02.000807D8.10010.346624.S.ONVIF 21.06 allows unauthenticated remote attackers to access sensitive device information and live video streams. The ONVIF implementation fails to enforce authentication on 31 critical endpoints, enabling direct unauthorized video stream access.

Affected configurations

• xiongmaitech xm530v200 x6-weq 8m firmware 5.00.r02.000807d8.10010.346624.s.onvif 21.06

Related

Weakness · CWE (1)

  • CWE-306 Missing Authentication for Critical Functionality weakness

References