{ "document": { "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE" } }, "lang": "nl", "notes": [ { "category": "legal_disclaimer", "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings." }, { "category": "description", "text": "Hanwha heeft kwetsbaarheden verholpen in verschillende camera systemen, waaronder issues met XML-validatie, certificaatvalidatie, permissiebeheer voor gastaccounts, video-analyse en een hardcoded encryptiesleutel.", "title": "Feiten" }, { "category": "description", "text": "De kwetsbaarheden omvatten onder andere een probleem met de validatie van binnenkomende XML-verzoeken, wat XSS-aanvallen op gebruikers kan faciliteren. Daarnaast is er een tekortkoming in de clientservice van de camera die certificaten niet correct valideert, wat de apparaten blootstelt aan beveiligingsrisico's. Een andere kwetsbaarheid betreft het beheer van gastaccounts in industriële controlesystemen, wat ongeautoriseerde toegang tot gevoelige functionaliteiten kan toestaan. Verder is er een probleem met onjuiste invoervalidatie in camera video-analyse, waardoor aanvallers willekeurige commando's op de pc van een gebruiker kunnen uitvoeren. Tot slot is er een kwetsbaarheid in Device Manager door een hardcoded encryptiesleutel die ongeautoriseerde decryptie van gevoelige informatie mogelijk maakt.", "title": "Interpretaties" }, { "category": "description", "text": "Hanwha heeft firmware patches uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.", "title": "Oplossingen" }, { "category": "general", "text": "medium", "title": "Kans" }, { "category": "general", "text": "high", "title": "Schade" }, { "category": "general", "text": "Improper Input Validation", "title": "CWE-20" }, { "category": "general", "text": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", "title": "CWE-79" }, { "category": "general", "text": "Improper Privilege Management", "title": "CWE-269" }, { "category": "general", "text": "Improper Certificate Validation", "title": "CWE-295" }, { "category": "general", "text": "Use of Hard-coded Cryptographic Key", "title": "CWE-321" } ], "publisher": { "category": "coordinator", "contact_details": "cert@ncsc.nl", "name": "Nationaal Cyber Security Centrum", "namespace": "https://www.ncsc.nl/" }, "references": [ { "category": "external", "summary": "Reference", "url": "https://www.hanwhavision.com/wp-content/uploads/2025/12/Camera-Vulnerability-ReportCVE-2025-5259852601-8075.pdf" } ], "title": "Kwetsbaarheden verholpen in Hanwha camera systemen", "tracking": { "current_release_date": "2026-01-08T12:28:21.446188Z", "generator": { "date": "2025-08-04T16:30:00Z", "engine": { "name": "V.A.", "version": "1.3" } }, "id": "NCSC-2026-0001", "initial_release_date": "2026-01-08T12:28:21.446188Z", "revision_history": [ { "date": "2026-01-08T12:28:21.446188Z", "number": "1.0.0", "summary": "Initiele versie" } ], "status": "final", "version": "1.0.0" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-1" } } ], "category": "product_name", "name": "LNV-6022R Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-2" } } ], "category": "product_name", "name": "PNM-7002VD Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-3" } } ], "category": "product_name", "name": "PNM-9000VD Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-4" } } ], "category": "product_name", "name": "PNM-9002VQ Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-5" } } ], "category": "product_name", "name": "PNM-9084QZ Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-6" } } ], "category": "product_name", "name": "PNM-9084QZ1 Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-7" } } ], "category": "product_name", "name": "PNM-9084RQZ Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-8" } } ], "category": "product_name", "name": "PNM-9084RQZ1 Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-9" } } ], "category": "product_name", "name": "PNM-9085RQZ Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-10" } } ], "category": "product_name", "name": "PNM-9085RQZ1 Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-11" } } ], "category": "product_name", "name": "PNM-9322VQP Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-12" } } ], "category": "product_name", "name": "QND-6011 Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-13" } } ], "category": "product_name", "name": "QND-8010R Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-14" } } ], "category": "product_name", "name": "QND-8020R Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-15" } } ], "category": "product_name", "name": "QNF-8010 Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-16" } } ], "category": "product_name", "name": "QNO-6010R Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-17" } } ], "category": "product_name", "name": "QNO-8020R Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-18" } } ], "category": "product_name", "name": "QNP-6230H Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-19" } } ], "category": "product_name", "name": "QNP-6230RH Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-20" } } ], "category": "product_name", "name": "QNP-6250 Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-21" } } ], "category": "product_name", "name": "QNP-6250H Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-22" } } ], "category": "product_name", "name": "QNP-6250R Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-23" } } ], "category": "product_name", "name": "QNP-6320 Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-24" } } ], "category": "product_name", "name": "QNP-6320H Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-25" } } ], "category": "product_name", "name": "QNP-6320R Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-26" } } ], "category": "product_name", "name": "QNV-8080R Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-27" } } ], "category": "product_name", "name": "XNB-6002 Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-28" } } ], "category": "product_name", "name": "XNB-6003 Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-29" } } ], "category": "product_name", "name": "XNB-8002 Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-30" } } ], "category": "product_name", "name": "XNB-8003 Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-31" } } ], "category": "product_name", "name": "XNB-9002 Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-32" } } ], "category": "product_name", "name": "XNB-9003 Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-33" } } ], "category": "product_name", "name": "XND-6083RV Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-34" } } ], "category": "product_name", "name": "XND-8082RF Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-35" } } ], "category": "product_name", "name": "XND-8082RV Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-36" } } ], "category": "product_name", "name": "XND-8083RV Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-37" } } ], "category": "product_name", "name": "XND-9082RV Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-38" } } ], "category": "product_name", "name": "XND-C6083RV Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-39" } } ], "category": "product_name", "name": "XND-C7083RV Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-40" } } ], "category": "product_name", "name": "XND-C8083RV Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-41" } } ], "category": "product_name", "name": "XND-C9083RV Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-42" } } ], "category": "product_name", "name": "XNF-9010RVM Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-43" } } ], "category": "product_name", "name": "XNF-9013RV Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-44" } } ], "category": "product_name", "name": "XNO-6083R Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-45" } } ], "category": "product_name", "name": "XNO-6123R Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-46" } } ], "category": "product_name", "name": "XNO-8082R Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-47" } } ], "category": "product_name", "name": "XNO-8083R Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-48" } } ], "category": "product_name", "name": "XNO-9083R Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-49" } } ], "category": "product_name", "name": "XNO-C6083R Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-50" } } ], "category": "product_name", "name": "XNO-C7083R Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-51" } } ], "category": "product_name", "name": "XNO-C8083R Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-52" } } ], "category": "product_name", "name": "XNO-C9083R Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-53" } } ], "category": "product_name", "name": "XNP-6400R Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-54" } } ], "category": "product_name", "name": "XNP-6400RW Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-55" } } ], "category": "product_name", "name": "XNP-8250 Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-56" } } ], "category": "product_name", "name": "XNP-8250R Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-57" } } ], "category": "product_name", "name": "XNP-8300RW Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-58" } } ], "category": "product_name", "name": "XNP-9250 Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-59" } } ], "category": "product_name", "name": "XNP-9300RW Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-60" } } ], "category": "product_name", "name": "XNV-6083R Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-61" } } ], "category": "product_name", "name": "XNV-6083RZ Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-62" } } ], "category": "product_name", "name": "XNV-6083Z Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-63" } } ], "category": "product_name", "name": "XNV-6123R Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-64" } } ], "category": "product_name", "name": "XNV-8082R Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-65" } } ], "category": "product_name", "name": "XNV-8083R Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-66" } } ], "category": "product_name", "name": "XNV-8083RZ Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-67" } } ], "category": "product_name", "name": "XNV-8083Z Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-68" } } ], "category": "product_name", "name": "XNV-8093R Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-69" } } ], "category": "product_name", "name": "XNV-9082R Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-70" } } ], "category": "product_name", "name": "XNV-9083R Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-71" } } ], "category": "product_name", "name": "XNV-9083RZ Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-72" } } ], "category": "product_name", "name": "XNV-C6083R Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-73" } } ], "category": "product_name", "name": "XNV-C7083R Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-74" } } ], "category": "product_name", "name": "XNV-C8083R Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-75" } } ], "category": "product_name", "name": "XNV-C9083R Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-76" } } ], "category": "product_name", "name": "pnm-7002vd_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-77" } } ], "category": "product_name", "name": "pnm-9000vq_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-78" } } ], "category": "product_name", "name": "pnm-9002vq_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-79" } } ], "category": "product_name", "name": "pnm-9080vq_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-80" } } ], "category": "product_name", "name": "pnm-9081vq_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-81" } } ], "category": "product_name", "name": "pnm-9320vqp_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-82" } } ], "category": "product_name", "name": "pnm-9321vqp_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-83" } } ], "category": "product_name", "name": "qnp-6230_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-84" } } ], "category": "product_name", "name": "qnp-6320_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-85" } } ], "category": "product_name", "name": "tnb-6030_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-86" } } ], "category": "product_name", "name": "xnb-6001_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-87" } } ], "category": "product_name", "name": "xnb-6002_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-88" } } ], "category": "product_name", "name": "xnb-6005_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-89" } } ], "category": "product_name", "name": "xnd-6010_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-90" } } ], "category": "product_name", "name": "xnd-6020r_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-91" } } ], "category": "product_name", "name": "xnd-6080rv_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-92" } } ], "category": "product_name", "name": "xnd-6080v_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-93" } } ], "category": "product_name", "name": "xnd-6081f_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-94" } } ], "category": "product_name", "name": "xnd-6081rev_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-95" } } ], "category": "product_name", "name": "xnd-6081rf_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-96" } } ], "category": "product_name", "name": "xnd-6081rv_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-97" } } ], "category": "product_name", "name": "xnd-6081v_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-98" } } ], "category": "product_name", "name": "xnd-6081vz_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-99" } } ], "category": "product_name", "name": "xnd-6083rv_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-100" } } ], "category": "product_name", "name": "xnd-8020f_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-101" } } ], "category": "product_name", "name": "xnd-8030r_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-102" } } ], "category": "product_name", "name": "xnd-8080rv_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-103" } } ], "category": "product_name", "name": "xnd-8081fz_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-104" } } ], "category": "product_name", "name": "xnd-8081rev_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-105" } } ], "category": "product_name", "name": "xnd-8081vz_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-106" } } ], "category": "product_name", "name": "xnd-8082rf_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-107" } } ], "category": "product_name", "name": "xnd-8082rv_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-108" } } ], "category": "product_name", "name": "xnd-9082rf_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-109" } } ], "category": "product_name", "name": "xnd-l6080rv_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-110" } } ], "category": "product_name", "name": "xnd-l6080v_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-111" } } ], "category": "product_name", "name": "xnf-8010r_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-112" } } ], "category": "product_name", "name": "xnf-8010rv_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-113" } } ], "category": "product_name", "name": "xnf-8010rw_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-114" } } ], "category": "product_name", "name": "xnf-9010rs_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-115" } } ], "category": "product_name", "name": "xnf-9010rv_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-116" } } ], "category": "product_name", "name": "xnf-9010rvm_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-117" } } ], "category": "product_name", "name": "xno-6020r_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-118" } } ], "category": "product_name", "name": "xno-6080r_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-119" } } ], "category": "product_name", "name": "xno-6085r_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-120" } } ], "category": "product_name", "name": "xno-6120r_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-121" } } ], "category": "product_name", "name": "xno-8030r_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-122" } } ], "category": "product_name", "name": "xno-8040r_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-123" } } ], "category": "product_name", "name": "xno-8080r_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-124" } } ], "category": "product_name", "name": "xno-l6080r_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-125" } } ], "category": "product_name", "name": "xnp-6040h_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-126" } } ], "category": "product_name", "name": "xnp-6120h_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-127" } } ], "category": "product_name", "name": "xnp-6320_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-128" } } ], "category": "product_name", "name": "xnp-6320h_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-129" } } ], "category": "product_name", "name": "xnp-6320hs_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-130" } } ], "category": "product_name", "name": "xnp-6320rh_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-131" } } ], "category": "product_name", "name": "xnp-6321_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-132" } } ], "category": "product_name", "name": "xnp-6321h_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-133" } } ], "category": "product_name", "name": "xnp-6400_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-134" } } ], "category": "product_name", "name": "xnp-6550rh_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-135" } } ], "category": "product_name", "name": "xnp-9250r_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-136" } } ], "category": "product_name", "name": "xnv-6010_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-137" } } ], "category": "product_name", "name": "xnv-6011_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-138" } } ], "category": "product_name", "name": "xnv-6011w_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-139" } } ], "category": "product_name", "name": "xnv-6012_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-140" } } ], "category": "product_name", "name": "xnv-6012m_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-141" } } ], "category": "product_name", "name": "xnv-6020r_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-142" } } ], "category": "product_name", "name": "xnv-6022rm_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-143" } } ], "category": "product_name", "name": "xnv-6080_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-144" } } ], "category": "product_name", "name": "xnv-6080r_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-145" } } ], "category": "product_name", "name": "xnv-6080rs_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-146" } } ], "category": "product_name", "name": "xnv-6080rsa_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-147" } } ], "category": "product_name", "name": "xnv-6081_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-148" } } ], "category": "product_name", "name": "xnv-6081r_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-149" } } ], "category": "product_name", "name": "xnv-6081re_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-150" } } ], "category": "product_name", "name": "xnv-6081z_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-151" } } ], "category": "product_name", "name": "xnv-6083r_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-152" } } ], "category": "product_name", "name": "xnv-6085_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-153" } } ], "category": "product_name", "name": "xnv-6120r_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-154" } } ], "category": "product_name", "name": "xnv-6120rs_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-155" } } ], "category": "product_name", "name": "xnv-6123r_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-156" } } ], "category": "product_name", "name": "xnv-8020r_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-157" } } ], "category": "product_name", "name": "xnv-8030r_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-158" } } ], "category": "product_name", "name": "xnv-8040r_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-159" } } ], "category": "product_name", "name": "xnv-8080r_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-160" } } ], "category": "product_name", "name": "xnv-8080rsa_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-161" } } ], "category": "product_name", "name": "xnv-8081r_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-162" } } ], "category": "product_name", "name": "xnv-l6080_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-163" } } ], "category": "product_name", "name": "xnv-l6080r_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-164" } } ], "category": "product_name", "name": "xnz-6320_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-165" } } ], "category": "product_name", "name": "xnz-l6320_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-166" } } ], "category": "product_name", "name": "xnz-l6320a_firmware" } ], "category": "vendor", "name": "Hanwha" } ] }, "vulnerabilities": [ { "cve": "CVE-2025-8075", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "notes": [ { "category": "other", "text": "Improper Input Validation", "title": "CWE-20" }, { "category": "other", "text": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", "title": "CWE-79" }, { "category": "description", "text": "Nozomi Networks Labs has discovered a vulnerability in XML request message validation that may lead to XSS attacks, with a firmware patch released by the manufacturer to resolve the issue.", "title": "Summary" }, { "category": "general", "text": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166" ] }, "references": [ { "category": "self", "summary": "CVE-2025-8075 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-8075.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "baseScore": 6.1, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166" ] } ], "title": "CVE-2025-8075" }, { "cve": "CVE-2025-52598", "cwe": { "id": "CWE-295", "name": "Improper Certificate Validation" }, "notes": [ { "category": "other", "text": "Improper Certificate Validation", "title": "CWE-295" }, { "category": "description", "text": "Nozomi Networks Labs identified a vulnerability in a camera's client service due to insufficient certificate validation, prompting the manufacturer to release a firmware patch.", "title": "Summary" }, { "category": "general", "text": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166" ] }, "references": [ { "category": "self", "summary": "CVE-2025-52598 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-52598.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "baseScore": 3.7, "baseSeverity": "LOW" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166" ] } ], "title": "CVE-2025-52598" }, { "cve": "CVE-2025-52599", "cwe": { "id": "CWE-269", "name": "Improper Privilege Management" }, "notes": [ { "category": "other", "text": "Improper Privilege Management", "title": "CWE-269" }, { "category": "description", "text": "Nozomi Networks Labs discovered a permission management flaw in camera guest accounts within Industrial Control Systems, leading to a firmware patch release by the manufacturer.", "title": "Summary" }, { "category": "general", "text": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166" ] }, "references": [ { "category": "self", "summary": "CVE-2025-52599 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-52599.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "baseScore": 6.5, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166" ] } ], "title": "CVE-2025-52599" }, { "cve": "CVE-2025-52600", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "notes": [ { "category": "other", "text": "Improper Input Validation", "title": "CWE-20" }, { "category": "description", "text": "Nozomi Networks Labs has discovered a vulnerability in camera video analytics due to improper input validation, allowing potential command execution on user PCs, with a firmware patch released by the manufacturer.", "title": "Summary" }, { "category": "general", "text": "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166" ] }, "references": [ { "category": "self", "summary": "CVE-2025-52600 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-52600.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166" ] } ], "title": "CVE-2025-52600" }, { "cve": "CVE-2025-52601", "cwe": { "id": "CWE-321", "name": "Use of Hard-coded Cryptographic Key" }, "notes": [ { "category": "other", "text": "Use of Hard-coded Cryptographic Key", "title": "CWE-321" }, { "category": "description", "text": "Nozomi Networks Labs has discovered a vulnerability in Device Manager due to a hardcoded encryption key, enabling attackers to decrypt sensitive information, with a patch firmware released by the manufacturer.", "title": "Summary" }, { "category": "general", "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166" ] }, "references": [ { "category": "self", "summary": "CVE-2025-52601 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-52601.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "baseScore": 7.5, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166" ] } ], "title": "CVE-2025-52601" } ] }