{"id":"CVE-2025-8075","title":"Cybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial Control Systems (ICS) and OT/IoT security, has discovered that validation of incoming XML format request messages is inadequate","summary":"Cybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial Control Systems (ICS) and OT/IoT security, has discovered that validation of incoming XML format request messages is inadequate. This vulnerability …","severity":"medium","cvss":5.4,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","cwe":["CWE-20","CWE-79"],"vendor":"hanwhavision","product":"xno-8082r_firmware","affected":["xno-8082r_firmware < 2.24.00","xnv-8082r_firmware < 2.24.00","xnd-8082rf_firmware < 2.24.00","xnd-8082rv_firmware < 2.24.00","xnb-8002_firmware < 2.24.00","pnm-9084qz1_firmware < 2.23.00","pnm-9084rqz1_firmware < 2.23.00","pnm-9085rqz1_firmware < 2.23.00","pnm-9322vqp_firmware < 2.23.00","qnv-c9083r_firmware < 2.22.10","qno-c9083r_firmware < 2.22.10","qnv-c8083r_firmware < 2.22.10","qno-c8083r_firmware < 2.22.10","qnv-c9011r_firmware < 2.22.10","qnv-c8011r_firmware < 2.22.10","qnv-c8012_firmware < 2.22.10","qne-c9013rl_firmware < 2.22.10","qne-c8013rl_firmware < 2.22.10","qnv-c6083r_firmware < 2.22.10","qno-c6083r_firmware < 2.22.10","tnv-c8011rw_firmware < 2.22.10","qnv-c8013r_firmware < 2.22.10","qno-c8013r_firmware < 2.22.10","qnd-c8013r_firmware < 2.22.10","qnv-c8023r_firmware < 2.22.10","qno-c8023r_firmware < 2.22.10","qnd-c8023r_firmware < 2.22.10","tnv-c8014rm_firmware < 2.22.10","tnv-c8034rm_firmware < 2.22.10","qnf-c9010_firmware < 2.22.10","qnf-c9010v_firmware < 2.22.10","xnb-6001_firmware < 2.10.06","xnf-8010r_firmware < 2.10.07","xnf-8010rv_firmware < 2.10.07","xnf-8010rvm_firmware < 2.10.07","xnf-8010rvmnb_firmware < 2.10.07","xnf-8010rvw_firmware < 2.10.07","xnf-8010rw_firmware < 2.10.07","qnf-8010_firmware < 2.10.03","tnv-7010rc_firmware < 2.10.03","qnp-6320r_firmware < 2.21.07","qnp-6250r_firmware < 2.21.07","xnz-l6320_firmware < 2.10.03","xnz-6320_firmware < 2.10.03","xno-6120_firmware < 2.10.04","xnv-l6080r_firmware < 2.23.01","xnd-l6080rva_firmware < 2.23.01","xnd-l6080va_firmware < 2.23.01","xno-l6080ra_firmware < 2.23.01","xnv-l6080a_firmware < 2.23.01","xnv-l6080ra_firmware < 2.23.01","qnp-6320h_firmware < 2.23.01","qnp-6320_firmware < 2.23.01","qnp-6250h_firmware < 2.23.01","qnp-6250_firmware < 2.23.01","xnp-6341rh_firmware < 2.23.01","xno-9082rz_firmware < 2.24.00","xnv-9082r_firmware < 2.24.00","xnd-9082rf_firmware < 2.24.00","xnd-9082rv_firmware < 2.24.00","xnb-9002_firmware < 2.24.00","xnf-9010rv_firmware < 2.24.00","xnf-9010rs_firmware < 2.24.00","xnf-9010rvm_firmware < 2.24.00","xnd-c7083rv_firmware < 2.24.00","xno-c7083r_firmware < 2.24.00","xnv-c7083r_firmware < 2.24.00","xnd-c6083rv_firmware < 2.24.00","xnv-c6083r_firmware < 2.24.00","xnv-c6083_firmware < 2.24.00","xno-c6083r_firmware < 2.24.00","xno-c9083r_firmware < 2.24.00","xnd-c9083rv_firmware < 2.24.00","xnv-c9083r_firmware < 2.24.00","xno-c8083r_firmware < 2.24.00","xnv-c8083r_firmware < 2.24.00","xnd-c8083rv_firmware < 2.24.00","xnb-6003_firmware < 2.24.00","xno-6083r_firmware < 2.24.00","xnv-6083r_firmware < 2.24.00","xnd-6083rv_firmware < 2.24.00","xno-8083r_firmware < 2.24.00","xnv-8093r_firmware < 2.24.00","xnv-8083r_firmware < 2.24.00","xnv-8083rvx_firmware < 2.24.00","xnd-8093rv__firmware < 2.24.00","xnd-8083rv__firmware < 2.24.00","xnd-8083rvx_firmware < 2.24.00","xnb-8003_firmware < 2.24.00","xnv-8083rx__firmware < 2.24.00","xnd-9083rv__firmware < 2.24.00","xno-9083r_firmware < 2.24.00","xnv-9083r_firmware < 2.24.00","xnb-9003_firmware < 2.24.00","xnv-6123r_firmware < 2.24.00","xno-6123r_firmware < 2.24.00","knd-5020rn_firmware < 2.23.01","xnd-8020r_firmware < 2.23.01","xnd-8020rw_firmware < 2.23.01","xnd-8030r_firmware < 2.23.01"],"patched":["xno-8082r_firmware 2.24.00","xnv-8082r_firmware 2.24.00","xnd-8082rf_firmware 2.24.00","xnd-8082rv_firmware 2.24.00","xnb-8002_firmware 2.24.00","pnm-9084qz1_firmware 2.23.00","pnm-9084rqz1_firmware 2.23.00","pnm-9085rqz1_firmware 2.23.00","pnm-9322vqp_firmware 2.23.00","qnv-c9083r_firmware 2.22.10","qno-c9083r_firmware 2.22.10","qnv-c8083r_firmware 2.22.10","qno-c8083r_firmware 2.22.10","qnv-c9011r_firmware 2.22.10","qnv-c8011r_firmware 2.22.10","qnv-c8012_firmware 2.22.10","qne-c9013rl_firmware 2.22.10","qne-c8013rl_firmware 2.22.10","qnv-c6083r_firmware 2.22.10","qno-c6083r_firmware 2.22.10","tnv-c8011rw_firmware 2.22.10","qnv-c8013r_firmware 2.22.10","qno-c8013r_firmware 2.22.10","qnd-c8013r_firmware 2.22.10","qnv-c8023r_firmware 2.22.10","qno-c8023r_firmware 2.22.10","qnd-c8023r_firmware 2.22.10","tnv-c8014rm_firmware 2.22.10","tnv-c8034rm_firmware 2.22.10","qnf-c9010_firmware 2.22.10","qnf-c9010v_firmware 2.22.10","xnb-6001_firmware 2.10.06","xnf-8010r_firmware 2.10.07","xnf-8010rv_firmware 2.10.07","xnf-8010rvm_firmware 2.10.07","xnf-8010rvmnb_firmware 2.10.07","xnf-8010rvw_firmware 2.10.07","xnf-8010rw_firmware 2.10.07","qnf-8010_firmware 2.10.03","tnv-7010rc_firmware 2.10.03","qnp-6320r_firmware 2.21.07","qnp-6250r_firmware 2.21.07","xnz-l6320_firmware 2.10.03","xnz-6320_firmware 2.10.03","xno-6120_firmware 2.10.04","xnv-l6080r_firmware 2.23.01","xnd-l6080rva_firmware 2.23.01","xnd-l6080va_firmware 2.23.01","xno-l6080ra_firmware 2.23.01","xnv-l6080a_firmware 2.23.01","xnv-l6080ra_firmware 2.23.01","qnp-6320h_firmware 2.23.01","qnp-6320_firmware 2.23.01","qnp-6250h_firmware 2.23.01","qnp-6250_firmware 2.23.01","xnp-6341rh_firmware 2.23.01","xno-9082rz_firmware 2.24.00","xnv-9082r_firmware 2.24.00","xnd-9082rf_firmware 2.24.00","xnd-9082rv_firmware 2.24.00","xnb-9002_firmware 2.24.00","xnf-9010rv_firmware 2.24.00","xnf-9010rs_firmware 2.24.00","xnf-9010rvm_firmware 2.24.00","xnd-c7083rv_firmware 2.24.00","xno-c7083r_firmware 2.24.00","xnv-c7083r_firmware 2.24.00","xnd-c6083rv_firmware 2.24.00","xnv-c6083r_firmware 2.24.00","xnv-c6083_firmware 2.24.00","xno-c6083r_firmware 2.24.00","xno-c9083r_firmware 2.24.00","xnd-c9083rv_firmware 2.24.00","xnv-c9083r_firmware 2.24.00","xno-c8083r_firmware 2.24.00","xnv-c8083r_firmware 2.24.00","xnd-c8083rv_firmware 2.24.00","xnb-6003_firmware 2.24.00","xno-6083r_firmware 2.24.00","xnv-6083r_firmware 2.24.00","xnd-6083rv_firmware 2.24.00","xno-8083r_firmware 2.24.00","xnv-8093r_firmware 2.24.00","xnv-8083r_firmware 2.24.00","xnv-8083rvx_firmware 2.24.00","xnd-8093rv__firmware 2.24.00","xnd-8083rv__firmware 2.24.00","xnd-8083rvx_firmware 2.24.00","xnb-8003_firmware 2.24.00","xnv-8083rx__firmware 2.24.00","xnd-9083rv__firmware 2.24.00","xno-9083r_firmware 2.24.00","xnv-9083r_firmware 2.24.00","xnb-9003_firmware 2.24.00","xnv-6123r_firmware 2.24.00","xno-6123r_firmware 2.24.00","knd-5020rn_firmware 2.23.01","xnd-8020r_firmware 2.23.01","xnd-8020rw_firmware 2.23.01","xnd-8030r_firmware 2.23.01"],"published":"2025-12-26","updated":"2026-09-30","sourceUpdated":"2026-09-30T23:10:00.237","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-8075","references":[{"url":"https://www.hanwhavision.com/wp-content/uploads/2025/12/Camera-Vulnerability-ReportCVE-2025-5259852601-8075.pdf","label":"fc9afe74-3f80-4fb7-a313-e6f036a89882"}],"tags":["nvd"],"epss":0.00201,"epssPercentile":0.09014,"ingestedAt":"2026-09-30T23:29:32.512Z","slug":"CVE-2025-8075","body":"## Overview\n\nCybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial Control Systems (ICS) and OT/IoT security, has discovered that validation of incoming XML format request messages is inadequate. This vulnerability could allow an attacker to XSS on the user's browser. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.\n\n## Affected\n\n- `xno-8082r_firmware < 2.24.00`\n- `xnv-8082r_firmware < 2.24.00`\n- `xnd-8082rf_firmware < 2.24.00`\n- `xnd-8082rv_firmware < 2.24.00`\n- `xnb-8002_firmware < 2.24.00`\n- `pnm-9084qz1_firmware < 2.23.00`\n- `pnm-9084rqz1_firmware < 2.23.00`\n- `pnm-9085rqz1_firmware < 2.23.00`\n- `pnm-9322vqp_firmware < 2.23.00`\n- `qnv-c9083r_firmware < 2.22.10`\n- `qno-c9083r_firmware < 2.22.10`\n- `qnv-c8083r_firmware < 2.22.10`\n- `qno-c8083r_firmware < 2.22.10`\n- `qnv-c9011r_firmware < 2.22.10`\n- `qnv-c8011r_firmware < 2.22.10`\n- `qnv-c8012_firmware < 2.22.10`\n- `qne-c9013rl_firmware < 2.22.10`\n- `qne-c8013rl_firmware < 2.22.10`\n- `qnv-c6083r_firmware < 2.22.10`\n- `qno-c6083r_firmware < 2.22.10`\n- `tnv-c8011rw_firmware < 2.22.10`\n- `qnv-c8013r_firmware < 2.22.10`\n- `qno-c8013r_firmware < 2.22.10`\n- `qnd-c8013r_firmware < 2.22.10`\n- `qnv-c8023r_firmware < 2.22.10`\n- `qno-c8023r_firmware < 2.22.10`\n- `qnd-c8023r_firmware < 2.22.10`\n- `tnv-c8014rm_firmware < 2.22.10`\n- `tnv-c8034rm_firmware < 2.22.10`\n- `qnf-c9010_firmware < 2.22.10`\n- `qnf-c9010v_firmware < 2.22.10`\n- `xnb-6001_firmware < 2.10.06`\n- `xnf-8010r_firmware < 2.10.07`\n- `xnf-8010rv_firmware < 2.10.07`\n- `xnf-8010rvm_firmware < 2.10.07`\n- `xnf-8010rvmnb_firmware < 2.10.07`\n- `xnf-8010rvw_firmware < 2.10.07`\n- `xnf-8010rw_firmware < 2.10.07`\n- `qnf-8010_firmware < 2.10.03`\n- `tnv-7010rc_firmware < 2.10.03`\n- `qnp-6320r_firmware < 2.21.07`\n- `qnp-6250r_firmware < 2.21.07`\n- `xnz-l6320_firmware < 2.10.03`\n- `xnz-6320_firmware < 2.10.03`\n- `xno-6120_firmware < 2.10.04`\n- `xnv-l6080r_firmware < 2.23.01`\n- `xnd-l6080rva_firmware < 2.23.01`\n- `xnd-l6080va_firmware < 2.23.01`\n- `xno-l6080ra_firmware < 2.23.01`\n- `xnv-l6080a_firmware < 2.23.01`\n- `xnv-l6080ra_firmware < 2.23.01`\n- `qnp-6320h_firmware < 2.23.01`\n- `qnp-6320_firmware < 2.23.01`\n- `qnp-6250h_firmware < 2.23.01`\n- `qnp-6250_firmware < 2.23.01`\n- `xnp-6341rh_firmware < 2.23.01`\n- `xno-9082rz_firmware < 2.24.00`\n- `xnv-9082r_firmware < 2.24.00`\n- `xnd-9082rf_firmware < 2.24.00`\n- `xnd-9082rv_firmware < 2.24.00`\n- `xnb-9002_firmware < 2.24.00`\n- `xnf-9010rv_firmware < 2.24.00`\n- `xnf-9010rs_firmware < 2.24.00`\n- `xnf-9010rvm_firmware < 2.24.00`\n- `xnd-c7083rv_firmware < 2.24.00`\n- `xno-c7083r_firmware < 2.24.00`\n- `xnv-c7083r_firmware < 2.24.00`\n- `xnd-c6083rv_firmware < 2.24.00`\n- `xnv-c6083r_firmware < 2.24.00`\n- `xnv-c6083_firmware < 2.24.00`\n- `xno-c6083r_firmware < 2.24.00`\n- `xno-c9083r_firmware < 2.24.00`\n- `xnd-c9083rv_firmware < 2.24.00`\n- `xnv-c9083r_firmware < 2.24.00`\n- `xno-c8083r_firmware < 2.24.00`\n- `xnv-c8083r_firmware < 2.24.00`\n- `xnd-c8083rv_firmware < 2.24.00`\n- `xnb-6003_firmware < 2.24.00`\n- `xno-6083r_firmware < 2.24.00`\n- `xnv-6083r_firmware < 2.24.00`\n- `xnd-6083rv_firmware < 2.24.00`\n- `xno-8083r_firmware < 2.24.00`\n- `xnv-8093r_firmware < 2.24.00`\n- `xnv-8083r_firmware < 2.24.00`\n- `xnv-8083rvx_firmware < 2.24.00`\n- `xnd-8093rv__firmware < 2.24.00`\n- `xnd-8083rv__firmware < 2.24.00`\n- `xnd-8083rvx_firmware < 2.24.00`\n- `xnb-8003_firmware < 2.24.00`\n- `xnv-8083rx__firmware < 2.24.00`\n- `xnd-9083rv__firmware < 2.24.00`\n- `xno-9083r_firmware < 2.24.00`\n- `xnv-9083r_firmware < 2.24.00`\n- `xnb-9003_firmware < 2.24.00`\n- `xnv-6123r_firmware < 2.24.00`\n- `xno-6123r_firmware < 2.24.00`\n- `knd-5020rn_firmware < 2.23.01`\n- `xnd-8020r_firmware < 2.23.01`\n- `xnd-8020rw_firmware < 2.23.01`\n- `xnd-8030r_firmware < 2.23.01`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `xno-8082r_firmware 2.24.00`\n- `xnv-8082r_firmware 2.24.00`\n- `xnd-8082rf_firmware 2.24.00`\n- `xnd-8082rv_firmware 2.24.00`\n- `xnb-8002_firmware 2.24.00`\n- `pnm-9084qz1_firmware 2.23.00`\n- `pnm-9084rqz1_firmware 2.23.00`\n- `pnm-9085rqz1_firmware 2.23.00`\n- `pnm-9322vqp_firmware 2.23.00`\n- `qnv-c9083r_firmware 2.22.10`\n- `qno-c9083r_firmware 2.22.10`\n- `qnv-c8083r_firmware 2.22.10`\n- `qno-c8083r_firmware 2.22.10`\n- `qnv-c9011r_firmware 2.22.10`\n- `qnv-c8011r_firmware 2.22.10`\n- `qnv-c8012_firmware 2.22.10`\n- `qne-c9013rl_firmware 2.22.10`\n- `qne-c8013rl_firmware 2.22.10`\n- `qnv-c6083r_firmware 2.22.10`\n- `qno-c6083r_firmware 2.22.10`\n- `tnv-c8011rw_firmware 2.22.10`\n- `qnv-c8013r_firmware 2.22.10`\n- `qno-c8013r_firmware 2.22.10`\n- `qnd-c8013r_firmware 2.22.10`\n- `qnv-c8023r_firmware 2.22.10`\n- `qno-c8023r_firmware 2.22.10`\n- `qnd-c8023r_firmware 2.22.10`\n- `tnv-c8014rm_firmware 2.22.10`\n- `tnv-c8034rm_firmware 2.22.10`\n- `qnf-c9010_firmware 2.22.10`\n- `qnf-c9010v_firmware 2.22.10`\n- `xnb-6001_firmware 2.10.06`\n- `xnf-8010r_firmware 2.10.07`\n- `xnf-8010rv_firmware 2.10.07`\n- `xnf-8010rvm_firmware 2.10.07`\n- `xnf-8010rvmnb_firmware 2.10.07`\n- `xnf-8010rvw_firmware 2.10.07`\n- `xnf-8010rw_firmware 2.10.07`\n- `qnf-8010_firmware 2.10.03`\n- `tnv-7010rc_firmware 2.10.03`\n- `qnp-6320r_firmware 2.21.07`\n- `qnp-6250r_firmware 2.21.07`\n- `xnz-l6320_firmware 2.10.03`\n- `xnz-6320_firmware 2.10.03`\n- `xno-6120_firmware 2.10.04`\n- `xnv-l6080r_firmware 2.23.01`\n- `xnd-l6080rva_firmware 2.23.01`\n- `xnd-l6080va_firmware 2.23.01`\n- `xno-l6080ra_firmware 2.23.01`\n- `xnv-l6080a_firmware 2.23.01`\n- `xnv-l6080ra_firmware 2.23.01`\n- `qnp-6320h_firmware 2.23.01`\n- `qnp-6320_firmware 2.23.01`\n- `qnp-6250h_firmware 2.23.01`\n- `qnp-6250_firmware 2.23.01`\n- `xnp-6341rh_firmware 2.23.01`\n- `xno-9082rz_firmware 2.24.00`\n- `xnv-9082r_firmware 2.24.00`\n- `xnd-9082rf_firmware 2.24.00`\n- `xnd-9082rv_firmware 2.24.00`\n- `xnb-9002_firmware 2.24.00`\n- `xnf-9010rv_firmware 2.24.00`\n- `xnf-9010rs_firmware 2.24.00`\n- `xnf-9010rvm_firmware 2.24.00`\n- `xnd-c7083rv_firmware 2.24.00`\n- `xno-c7083r_firmware 2.24.00`\n- `xnv-c7083r_firmware 2.24.00`\n- `xnd-c6083rv_firmware 2.24.00`\n- `xnv-c6083r_firmware 2.24.00`\n- `xnv-c6083_firmware 2.24.00`\n- `xno-c6083r_firmware 2.24.00`\n- `xno-c9083r_firmware 2.24.00`\n- `xnd-c9083rv_firmware 2.24.00`\n- `xnv-c9083r_firmware 2.24.00`\n- `xno-c8083r_firmware 2.24.00`\n- `xnv-c8083r_firmware 2.24.00`\n- `xnd-c8083rv_firmware 2.24.00`\n- `xnb-6003_firmware 2.24.00`\n- `xno-6083r_firmware 2.24.00`\n- `xnv-6083r_firmware 2.24.00`\n- `xnd-6083rv_firmware 2.24.00`\n- `xno-8083r_firmware 2.24.00`\n- `xnv-8093r_firmware 2.24.00`\n- `xnv-8083r_firmware 2.24.00`\n- `xnv-8083rvx_firmware 2.24.00`\n- `xnd-8093rv__firmware 2.24.00`\n- `xnd-8083rv__firmware 2.24.00`\n- `xnd-8083rvx_firmware 2.24.00`\n- `xnb-8003_firmware 2.24.00`\n- `xnv-8083rx__firmware 2.24.00`\n- `xnd-9083rv__firmware 2.24.00`\n- `xno-9083r_firmware 2.24.00`\n- `xnv-9083r_firmware 2.24.00`\n- `xnb-9003_firmware 2.24.00`\n- `xnv-6123r_firmware 2.24.00`\n- `xno-6123r_firmware 2.24.00`\n- `knd-5020rn_firmware 2.23.01`\n- `xnd-8020r_firmware 2.23.01`\n- `xnd-8020rw_firmware 2.23.01`\n- `xnd-8030r_firmware 2.23.01`","depth":"sunlit","depthScore":30,"depthScoreParts":{"impact":29.7,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}