CVEvulnerability

CVE-2025-8075

5.8 MEDIUM Published 2025-12-26 Modified 2026-10-07 Official page ↗
Status
Analyzed
Published
2025-12-26
Last modified
2026-10-07
Assigner
fc9afe74-3f80-4fb7-a313-e6f036a89882
CVSS 4.0 (fc9afe74-3f80-4fb7-a313-e6f036a89882)
5.8 MEDIUM — CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1 ([email protected])
5.4 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Weaknesses
CWE-20, CWE-79

Description

Cybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial Control Systems (ICS) and OT/IoT security, has discovered that validation of incoming XML format request messages is inadequate. This vulnerability could allow an attacker to XSS on the user's browser. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.

Affected configurations

• hanwhavision xno-8082r firmware (< 2.24.00) • hanwhavision xnv-8082r firmware (< 2.24.00) • hanwhavision xnd-8082rf firmware (< 2.24.00) • hanwhavision xnd-8082rv firmware (< 2.24.00) • hanwhavision xnb-8002 firmware (< 2.24.00) • hanwhavision pnm-9084qz1 firmware (< 2.23.00) • hanwhavision pnm-9084rqz1 firmware (< 2.23.00) • hanwhavision pnm-9085rqz1 firmware (< 2.23.00) • hanwhavision pnm-9322vqp firmware (< 2.23.00) • hanwhavision qnv-c9083r firmware (< 2.22.10) • hanwhavision qno-c9083r firmware (< 2.22.10) • hanwhavision qnv-c8083r firmware (< 2.22.10) • hanwhavision qno-c8083r firmware (< 2.22.10) • hanwhavision qnv-c9011r firmware (< 2.22.10) • hanwhavision qnv-c8011r firmware (< 2.22.10) • hanwhavision qnv-c8012 firmware (< 2.22.10) • hanwhavision qne-c9013rl firmware (< 2.22.10) • hanwhavision qne-c8013rl firmware (< 2.22.10) • hanwhavision qnv-c6083r firmware (< 2.22.10) • hanwhavision qno-c6083r firmware (< 2.22.10) • hanwhavision tnv-c8011rw firmware (< 2.22.10) • hanwhavision qnv-c8013r firmware (< 2.22.10) • hanwhavision qno-c8013r firmware (< 2.22.10) • hanwhavision qnd-c8013r firmware (< 2.22.10) • hanwhavision qnv-c8023r firmware (< 2.22.10) • hanwhavision qno-c8023r firmware (< 2.22.10) • hanwhavision qnd-c8023r firmware (< 2.22.10) • hanwhavision tnv-c8014rm firmware (< 2.22.10) • hanwhavision tnv-c8034rm firmware (< 2.22.10) • hanwhavision qnf-c9010 firmware (< 2.22.10) • hanwhavision qnf-c9010v firmware (< 2.22.10) • hanwhavision xnb-6001 firmware (< 2.10.06) • hanwhavision xnf-8010r firmware (< 2.10.07) • hanwhavision xnf-8010rv firmware (< 2.10.07) • hanwhavision xnf-8010rvm firmware (< 2.10.07) • hanwhavision xnf-8010rvmnb firmware (< 2.10.07) • hanwhavision xnf-8010rvw firmware (< 2.10.07) • hanwhavision xnf-8010rw firmware (< 2.10.07) • hanwhavision qnf-8010 firmware (< 2.10.03) • hanwhavision tnv-7010rc firmware (< 2.10.03) • hanwhavision qnp-6320r firmware (< 2.21.07) • hanwhavision qnp-6250r firmware (< 2.21.07) • hanwhavision xnz-l6320 firmware (< 2.10.03) • hanwhavision xnz-6320 firmware (< 2.10.03) • hanwhavision xno-6120 firmware (< 2.10.04) • hanwhavision xnv-l6080r firmware (< 2.23.01) • hanwhavision xnd-l6080rva firmware (< 2.23.01) • hanwhavision xnd-l6080va firmware (< 2.23.01) • hanwhavision xno-l6080ra firmware (< 2.23.01) • hanwhavision xnv-l6080a firmware (< 2.23.01) • hanwhavision xnv-l6080ra firmware (< 2.23.01) • hanwhavision qnp-6320h firmware (< 2.23.01) • hanwhavision qnp-6320 firmware (< 2.23.01) • hanwhavision qnp-6250h firmware (< 2.23.01) • hanwhavision qnp-6250 firmware (< 2.23.01) • hanwhavision xnp-6341rh firmware (< 2.23.01) • hanwhavision xno-9082rz firmware (< 2.24.00) • hanwhavision xnv-9082r firmware (< 2.24.00) • hanwhavision xnd-9082rf firmware (< 2.24.00) • hanwhavision xnd-9082rv firmware (< 2.24.00) … and 196 more

Related

Weakness · CWE (2)

  • CWE-20 Improper Input Validation weakness
  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References