{"id":"CVE-2025-65857","title":"An issue was discovered in Xiongmai XM530 IP cameras on firmware V5.00.R02.000807D8.10010.346624.S.ONVIF 21.06","summary":"An issue was discovered in Xiongmai XM530 IP cameras on firmware V5.00.R02.000807D8.10010.346624.S.ONVIF 21.06. The GetStreamUri exposes RTSP URIs containing hardcoded credentials enabling direct unauthorized video stream access.","severity":"high","cvss":7.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-359"],"vendor":"xiongmaitech","product":"xm530v200_x6-weq_8m_firmware","affected":["xm530v200_x6-weq_8m_firmware = 5.00.r02.000807d8.10010.346624.s.onvif_21.06"],"published":"2025-12-22","updated":"2026-07-05","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-65857","references":[{"url":"https://luismirandaacebedo.github.io/CVE-2025-65857/","label":"cve@mitre.org"},{"url":"https://www.xiongmaitech.com/en/index.php/service/notice_info/51/4","label":"cve@mitre.org"}],"tags":["nvd","exploit-available"],"epss":0.00429,"epssPercentile":0.36774,"ingestedAt":"2026-07-06T16:44:34.496Z","exploits":{"github":1,"githubRepos":["https://github.com/LuisMirandaAcebedo/CVE-2025-65857"],"checkedAt":"2026-09-23T07:13:38.101Z"},"exploitAvailable":true,"slug":"CVE-2025-65857","body":"## Overview\n\nAn issue was discovered in Xiongmai XM530 IP cameras on firmware V5.00.R02.000807D8.10010.346624.S.ONVIF 21.06. The GetStreamUri exposes RTSP URIs containing hardcoded credentials enabling direct unauthorized video stream access.\n\n## Affected\n\n- `xm530v200_x6-weq_8m_firmware = 5.00.r02.000807d8.10010.346624.s.onvif_21.06`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"midnight","depthScore":53,"depthScoreParts":{"impact":41.3,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[{"seq":4860,"id":"CVE-2025-65857","ts":1788887212208,"field":"exploit_available","old":"false","new":"true"},{"seq":3743,"id":"CVE-2025-65857","ts":1788886328825,"field":"exploit_available","old":"true","new":"false"},{"seq":2588,"id":"CVE-2025-65857","ts":1788883009888,"field":"exploit_available","old":"false","new":"true"},{"seq":1617,"id":"CVE-2025-65857","ts":1788882410200,"field":"exploit_available","old":"true","new":"false"},{"seq":728,"id":"CVE-2025-65857","ts":1788881847430,"field":"exploit_available","old":"false","new":"true"}]}