---
id: CVE-2025-8075
title: >-
  Cybersecurity Nozomi Networks Labs, a specialized security company focused on
  Industrial Control Systems (ICS) and OT/IoT security, has discovered that
  validation of incoming XML format request messages is inadequate
summary: >-
  Cybersecurity Nozomi Networks Labs, a specialized security company focused on
  Industrial Control Systems (ICS) and OT/IoT security, has discovered that
  validation of incoming XML format request messages is inadequate. This
  vulnerability …
severity: medium
cvss: 5.4
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N'
cwe:
  - CWE-20
  - CWE-79
vendor: hanwhavision
product: xno-8082r_firmware
affected:
  - xno-8082r_firmware < 2.24.00
  - xnv-8082r_firmware < 2.24.00
  - xnd-8082rf_firmware < 2.24.00
  - xnd-8082rv_firmware < 2.24.00
  - xnb-8002_firmware < 2.24.00
  - pnm-9084qz1_firmware < 2.23.00
  - pnm-9084rqz1_firmware < 2.23.00
  - pnm-9085rqz1_firmware < 2.23.00
  - pnm-9322vqp_firmware < 2.23.00
  - qnv-c9083r_firmware < 2.22.10
  - qno-c9083r_firmware < 2.22.10
  - qnv-c8083r_firmware < 2.22.10
  - qno-c8083r_firmware < 2.22.10
  - qnv-c9011r_firmware < 2.22.10
  - qnv-c8011r_firmware < 2.22.10
  - qnv-c8012_firmware < 2.22.10
  - qne-c9013rl_firmware < 2.22.10
  - qne-c8013rl_firmware < 2.22.10
  - qnv-c6083r_firmware < 2.22.10
  - qno-c6083r_firmware < 2.22.10
  - tnv-c8011rw_firmware < 2.22.10
  - qnv-c8013r_firmware < 2.22.10
  - qno-c8013r_firmware < 2.22.10
  - qnd-c8013r_firmware < 2.22.10
  - qnv-c8023r_firmware < 2.22.10
  - qno-c8023r_firmware < 2.22.10
  - qnd-c8023r_firmware < 2.22.10
  - tnv-c8014rm_firmware < 2.22.10
  - tnv-c8034rm_firmware < 2.22.10
  - qnf-c9010_firmware < 2.22.10
  - qnf-c9010v_firmware < 2.22.10
  - xnb-6001_firmware < 2.10.06
  - xnf-8010r_firmware < 2.10.07
  - xnf-8010rv_firmware < 2.10.07
  - xnf-8010rvm_firmware < 2.10.07
  - xnf-8010rvmnb_firmware < 2.10.07
  - xnf-8010rvw_firmware < 2.10.07
  - xnf-8010rw_firmware < 2.10.07
  - qnf-8010_firmware < 2.10.03
  - tnv-7010rc_firmware < 2.10.03
  - qnp-6320r_firmware < 2.21.07
  - qnp-6250r_firmware < 2.21.07
  - xnz-l6320_firmware < 2.10.03
  - xnz-6320_firmware < 2.10.03
  - xno-6120_firmware < 2.10.04
  - xnv-l6080r_firmware < 2.23.01
  - xnd-l6080rva_firmware < 2.23.01
  - xnd-l6080va_firmware < 2.23.01
  - xno-l6080ra_firmware < 2.23.01
  - xnv-l6080a_firmware < 2.23.01
  - xnv-l6080ra_firmware < 2.23.01
  - qnp-6320h_firmware < 2.23.01
  - qnp-6320_firmware < 2.23.01
  - qnp-6250h_firmware < 2.23.01
  - qnp-6250_firmware < 2.23.01
  - xnp-6341rh_firmware < 2.23.01
  - xno-9082rz_firmware < 2.24.00
  - xnv-9082r_firmware < 2.24.00
  - xnd-9082rf_firmware < 2.24.00
  - xnd-9082rv_firmware < 2.24.00
  - xnb-9002_firmware < 2.24.00
  - xnf-9010rv_firmware < 2.24.00
  - xnf-9010rs_firmware < 2.24.00
  - xnf-9010rvm_firmware < 2.24.00
  - xnd-c7083rv_firmware < 2.24.00
  - xno-c7083r_firmware < 2.24.00
  - xnv-c7083r_firmware < 2.24.00
  - xnd-c6083rv_firmware < 2.24.00
  - xnv-c6083r_firmware < 2.24.00
  - xnv-c6083_firmware < 2.24.00
  - xno-c6083r_firmware < 2.24.00
  - xno-c9083r_firmware < 2.24.00
  - xnd-c9083rv_firmware < 2.24.00
  - xnv-c9083r_firmware < 2.24.00
  - xno-c8083r_firmware < 2.24.00
  - xnv-c8083r_firmware < 2.24.00
  - xnd-c8083rv_firmware < 2.24.00
  - xnb-6003_firmware < 2.24.00
  - xno-6083r_firmware < 2.24.00
  - xnv-6083r_firmware < 2.24.00
  - xnd-6083rv_firmware < 2.24.00
  - xno-8083r_firmware < 2.24.00
  - xnv-8093r_firmware < 2.24.00
  - xnv-8083r_firmware < 2.24.00
  - xnv-8083rvx_firmware < 2.24.00
  - xnd-8093rv__firmware < 2.24.00
  - xnd-8083rv__firmware < 2.24.00
  - xnd-8083rvx_firmware < 2.24.00
  - xnb-8003_firmware < 2.24.00
  - xnv-8083rx__firmware < 2.24.00
  - xnd-9083rv__firmware < 2.24.00
  - xno-9083r_firmware < 2.24.00
  - xnv-9083r_firmware < 2.24.00
  - xnb-9003_firmware < 2.24.00
  - xnv-6123r_firmware < 2.24.00
  - xno-6123r_firmware < 2.24.00
  - knd-5020rn_firmware < 2.23.01
  - xnd-8020r_firmware < 2.23.01
  - xnd-8020rw_firmware < 2.23.01
  - xnd-8030r_firmware < 2.23.01
patched:
  - xno-8082r_firmware 2.24.00
  - xnv-8082r_firmware 2.24.00
  - xnd-8082rf_firmware 2.24.00
  - xnd-8082rv_firmware 2.24.00
  - xnb-8002_firmware 2.24.00
  - pnm-9084qz1_firmware 2.23.00
  - pnm-9084rqz1_firmware 2.23.00
  - pnm-9085rqz1_firmware 2.23.00
  - pnm-9322vqp_firmware 2.23.00
  - qnv-c9083r_firmware 2.22.10
  - qno-c9083r_firmware 2.22.10
  - qnv-c8083r_firmware 2.22.10
  - qno-c8083r_firmware 2.22.10
  - qnv-c9011r_firmware 2.22.10
  - qnv-c8011r_firmware 2.22.10
  - qnv-c8012_firmware 2.22.10
  - qne-c9013rl_firmware 2.22.10
  - qne-c8013rl_firmware 2.22.10
  - qnv-c6083r_firmware 2.22.10
  - qno-c6083r_firmware 2.22.10
  - tnv-c8011rw_firmware 2.22.10
  - qnv-c8013r_firmware 2.22.10
  - qno-c8013r_firmware 2.22.10
  - qnd-c8013r_firmware 2.22.10
  - qnv-c8023r_firmware 2.22.10
  - qno-c8023r_firmware 2.22.10
  - qnd-c8023r_firmware 2.22.10
  - tnv-c8014rm_firmware 2.22.10
  - tnv-c8034rm_firmware 2.22.10
  - qnf-c9010_firmware 2.22.10
  - qnf-c9010v_firmware 2.22.10
  - xnb-6001_firmware 2.10.06
  - xnf-8010r_firmware 2.10.07
  - xnf-8010rv_firmware 2.10.07
  - xnf-8010rvm_firmware 2.10.07
  - xnf-8010rvmnb_firmware 2.10.07
  - xnf-8010rvw_firmware 2.10.07
  - xnf-8010rw_firmware 2.10.07
  - qnf-8010_firmware 2.10.03
  - tnv-7010rc_firmware 2.10.03
  - qnp-6320r_firmware 2.21.07
  - qnp-6250r_firmware 2.21.07
  - xnz-l6320_firmware 2.10.03
  - xnz-6320_firmware 2.10.03
  - xno-6120_firmware 2.10.04
  - xnv-l6080r_firmware 2.23.01
  - xnd-l6080rva_firmware 2.23.01
  - xnd-l6080va_firmware 2.23.01
  - xno-l6080ra_firmware 2.23.01
  - xnv-l6080a_firmware 2.23.01
  - xnv-l6080ra_firmware 2.23.01
  - qnp-6320h_firmware 2.23.01
  - qnp-6320_firmware 2.23.01
  - qnp-6250h_firmware 2.23.01
  - qnp-6250_firmware 2.23.01
  - xnp-6341rh_firmware 2.23.01
  - xno-9082rz_firmware 2.24.00
  - xnv-9082r_firmware 2.24.00
  - xnd-9082rf_firmware 2.24.00
  - xnd-9082rv_firmware 2.24.00
  - xnb-9002_firmware 2.24.00
  - xnf-9010rv_firmware 2.24.00
  - xnf-9010rs_firmware 2.24.00
  - xnf-9010rvm_firmware 2.24.00
  - xnd-c7083rv_firmware 2.24.00
  - xno-c7083r_firmware 2.24.00
  - xnv-c7083r_firmware 2.24.00
  - xnd-c6083rv_firmware 2.24.00
  - xnv-c6083r_firmware 2.24.00
  - xnv-c6083_firmware 2.24.00
  - xno-c6083r_firmware 2.24.00
  - xno-c9083r_firmware 2.24.00
  - xnd-c9083rv_firmware 2.24.00
  - xnv-c9083r_firmware 2.24.00
  - xno-c8083r_firmware 2.24.00
  - xnv-c8083r_firmware 2.24.00
  - xnd-c8083rv_firmware 2.24.00
  - xnb-6003_firmware 2.24.00
  - xno-6083r_firmware 2.24.00
  - xnv-6083r_firmware 2.24.00
  - xnd-6083rv_firmware 2.24.00
  - xno-8083r_firmware 2.24.00
  - xnv-8093r_firmware 2.24.00
  - xnv-8083r_firmware 2.24.00
  - xnv-8083rvx_firmware 2.24.00
  - xnd-8093rv__firmware 2.24.00
  - xnd-8083rv__firmware 2.24.00
  - xnd-8083rvx_firmware 2.24.00
  - xnb-8003_firmware 2.24.00
  - xnv-8083rx__firmware 2.24.00
  - xnd-9083rv__firmware 2.24.00
  - xno-9083r_firmware 2.24.00
  - xnv-9083r_firmware 2.24.00
  - xnb-9003_firmware 2.24.00
  - xnv-6123r_firmware 2.24.00
  - xno-6123r_firmware 2.24.00
  - knd-5020rn_firmware 2.23.01
  - xnd-8020r_firmware 2.23.01
  - xnd-8020rw_firmware 2.23.01
  - xnd-8030r_firmware 2.23.01
published: '2025-12-26'
updated: '2026-09-30'
sourceUpdated: '2026-09-30T23:10:00.237'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-8075'
references:
  - url: >-
      https://www.hanwhavision.com/wp-content/uploads/2025/12/Camera-Vulnerability-ReportCVE-2025-5259852601-8075.pdf
    label: fc9afe74-3f80-4fb7-a313-e6f036a89882
tags:
  - nvd
epss: 0.00201
epssPercentile: 0.09014
ingestedAt: '2026-09-30T23:29:32.512Z'
---

## Overview

Cybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial Control Systems (ICS) and OT/IoT security, has discovered that validation of incoming XML format request messages is inadequate. This vulnerability could allow an attacker to XSS on the user's browser. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.

## Affected

- `xno-8082r_firmware < 2.24.00`
- `xnv-8082r_firmware < 2.24.00`
- `xnd-8082rf_firmware < 2.24.00`
- `xnd-8082rv_firmware < 2.24.00`
- `xnb-8002_firmware < 2.24.00`
- `pnm-9084qz1_firmware < 2.23.00`
- `pnm-9084rqz1_firmware < 2.23.00`
- `pnm-9085rqz1_firmware < 2.23.00`
- `pnm-9322vqp_firmware < 2.23.00`
- `qnv-c9083r_firmware < 2.22.10`
- `qno-c9083r_firmware < 2.22.10`
- `qnv-c8083r_firmware < 2.22.10`
- `qno-c8083r_firmware < 2.22.10`
- `qnv-c9011r_firmware < 2.22.10`
- `qnv-c8011r_firmware < 2.22.10`
- `qnv-c8012_firmware < 2.22.10`
- `qne-c9013rl_firmware < 2.22.10`
- `qne-c8013rl_firmware < 2.22.10`
- `qnv-c6083r_firmware < 2.22.10`
- `qno-c6083r_firmware < 2.22.10`
- `tnv-c8011rw_firmware < 2.22.10`
- `qnv-c8013r_firmware < 2.22.10`
- `qno-c8013r_firmware < 2.22.10`
- `qnd-c8013r_firmware < 2.22.10`
- `qnv-c8023r_firmware < 2.22.10`
- `qno-c8023r_firmware < 2.22.10`
- `qnd-c8023r_firmware < 2.22.10`
- `tnv-c8014rm_firmware < 2.22.10`
- `tnv-c8034rm_firmware < 2.22.10`
- `qnf-c9010_firmware < 2.22.10`
- `qnf-c9010v_firmware < 2.22.10`
- `xnb-6001_firmware < 2.10.06`
- `xnf-8010r_firmware < 2.10.07`
- `xnf-8010rv_firmware < 2.10.07`
- `xnf-8010rvm_firmware < 2.10.07`
- `xnf-8010rvmnb_firmware < 2.10.07`
- `xnf-8010rvw_firmware < 2.10.07`
- `xnf-8010rw_firmware < 2.10.07`
- `qnf-8010_firmware < 2.10.03`
- `tnv-7010rc_firmware < 2.10.03`
- `qnp-6320r_firmware < 2.21.07`
- `qnp-6250r_firmware < 2.21.07`
- `xnz-l6320_firmware < 2.10.03`
- `xnz-6320_firmware < 2.10.03`
- `xno-6120_firmware < 2.10.04`
- `xnv-l6080r_firmware < 2.23.01`
- `xnd-l6080rva_firmware < 2.23.01`
- `xnd-l6080va_firmware < 2.23.01`
- `xno-l6080ra_firmware < 2.23.01`
- `xnv-l6080a_firmware < 2.23.01`
- `xnv-l6080ra_firmware < 2.23.01`
- `qnp-6320h_firmware < 2.23.01`
- `qnp-6320_firmware < 2.23.01`
- `qnp-6250h_firmware < 2.23.01`
- `qnp-6250_firmware < 2.23.01`
- `xnp-6341rh_firmware < 2.23.01`
- `xno-9082rz_firmware < 2.24.00`
- `xnv-9082r_firmware < 2.24.00`
- `xnd-9082rf_firmware < 2.24.00`
- `xnd-9082rv_firmware < 2.24.00`
- `xnb-9002_firmware < 2.24.00`
- `xnf-9010rv_firmware < 2.24.00`
- `xnf-9010rs_firmware < 2.24.00`
- `xnf-9010rvm_firmware < 2.24.00`
- `xnd-c7083rv_firmware < 2.24.00`
- `xno-c7083r_firmware < 2.24.00`
- `xnv-c7083r_firmware < 2.24.00`
- `xnd-c6083rv_firmware < 2.24.00`
- `xnv-c6083r_firmware < 2.24.00`
- `xnv-c6083_firmware < 2.24.00`
- `xno-c6083r_firmware < 2.24.00`
- `xno-c9083r_firmware < 2.24.00`
- `xnd-c9083rv_firmware < 2.24.00`
- `xnv-c9083r_firmware < 2.24.00`
- `xno-c8083r_firmware < 2.24.00`
- `xnv-c8083r_firmware < 2.24.00`
- `xnd-c8083rv_firmware < 2.24.00`
- `xnb-6003_firmware < 2.24.00`
- `xno-6083r_firmware < 2.24.00`
- `xnv-6083r_firmware < 2.24.00`
- `xnd-6083rv_firmware < 2.24.00`
- `xno-8083r_firmware < 2.24.00`
- `xnv-8093r_firmware < 2.24.00`
- `xnv-8083r_firmware < 2.24.00`
- `xnv-8083rvx_firmware < 2.24.00`
- `xnd-8093rv__firmware < 2.24.00`
- `xnd-8083rv__firmware < 2.24.00`
- `xnd-8083rvx_firmware < 2.24.00`
- `xnb-8003_firmware < 2.24.00`
- `xnv-8083rx__firmware < 2.24.00`
- `xnd-9083rv__firmware < 2.24.00`
- `xno-9083r_firmware < 2.24.00`
- `xnv-9083r_firmware < 2.24.00`
- `xnb-9003_firmware < 2.24.00`
- `xnv-6123r_firmware < 2.24.00`
- `xno-6123r_firmware < 2.24.00`
- `knd-5020rn_firmware < 2.23.01`
- `xnd-8020r_firmware < 2.23.01`
- `xnd-8020rw_firmware < 2.23.01`
- `xnd-8030r_firmware < 2.23.01`

## Remediation

Upgrade past the affected range:

- `xno-8082r_firmware 2.24.00`
- `xnv-8082r_firmware 2.24.00`
- `xnd-8082rf_firmware 2.24.00`
- `xnd-8082rv_firmware 2.24.00`
- `xnb-8002_firmware 2.24.00`
- `pnm-9084qz1_firmware 2.23.00`
- `pnm-9084rqz1_firmware 2.23.00`
- `pnm-9085rqz1_firmware 2.23.00`
- `pnm-9322vqp_firmware 2.23.00`
- `qnv-c9083r_firmware 2.22.10`
- `qno-c9083r_firmware 2.22.10`
- `qnv-c8083r_firmware 2.22.10`
- `qno-c8083r_firmware 2.22.10`
- `qnv-c9011r_firmware 2.22.10`
- `qnv-c8011r_firmware 2.22.10`
- `qnv-c8012_firmware 2.22.10`
- `qne-c9013rl_firmware 2.22.10`
- `qne-c8013rl_firmware 2.22.10`
- `qnv-c6083r_firmware 2.22.10`
- `qno-c6083r_firmware 2.22.10`
- `tnv-c8011rw_firmware 2.22.10`
- `qnv-c8013r_firmware 2.22.10`
- `qno-c8013r_firmware 2.22.10`
- `qnd-c8013r_firmware 2.22.10`
- `qnv-c8023r_firmware 2.22.10`
- `qno-c8023r_firmware 2.22.10`
- `qnd-c8023r_firmware 2.22.10`
- `tnv-c8014rm_firmware 2.22.10`
- `tnv-c8034rm_firmware 2.22.10`
- `qnf-c9010_firmware 2.22.10`
- `qnf-c9010v_firmware 2.22.10`
- `xnb-6001_firmware 2.10.06`
- `xnf-8010r_firmware 2.10.07`
- `xnf-8010rv_firmware 2.10.07`
- `xnf-8010rvm_firmware 2.10.07`
- `xnf-8010rvmnb_firmware 2.10.07`
- `xnf-8010rvw_firmware 2.10.07`
- `xnf-8010rw_firmware 2.10.07`
- `qnf-8010_firmware 2.10.03`
- `tnv-7010rc_firmware 2.10.03`
- `qnp-6320r_firmware 2.21.07`
- `qnp-6250r_firmware 2.21.07`
- `xnz-l6320_firmware 2.10.03`
- `xnz-6320_firmware 2.10.03`
- `xno-6120_firmware 2.10.04`
- `xnv-l6080r_firmware 2.23.01`
- `xnd-l6080rva_firmware 2.23.01`
- `xnd-l6080va_firmware 2.23.01`
- `xno-l6080ra_firmware 2.23.01`
- `xnv-l6080a_firmware 2.23.01`
- `xnv-l6080ra_firmware 2.23.01`
- `qnp-6320h_firmware 2.23.01`
- `qnp-6320_firmware 2.23.01`
- `qnp-6250h_firmware 2.23.01`
- `qnp-6250_firmware 2.23.01`
- `xnp-6341rh_firmware 2.23.01`
- `xno-9082rz_firmware 2.24.00`
- `xnv-9082r_firmware 2.24.00`
- `xnd-9082rf_firmware 2.24.00`
- `xnd-9082rv_firmware 2.24.00`
- `xnb-9002_firmware 2.24.00`
- `xnf-9010rv_firmware 2.24.00`
- `xnf-9010rs_firmware 2.24.00`
- `xnf-9010rvm_firmware 2.24.00`
- `xnd-c7083rv_firmware 2.24.00`
- `xno-c7083r_firmware 2.24.00`
- `xnv-c7083r_firmware 2.24.00`
- `xnd-c6083rv_firmware 2.24.00`
- `xnv-c6083r_firmware 2.24.00`
- `xnv-c6083_firmware 2.24.00`
- `xno-c6083r_firmware 2.24.00`
- `xno-c9083r_firmware 2.24.00`
- `xnd-c9083rv_firmware 2.24.00`
- `xnv-c9083r_firmware 2.24.00`
- `xno-c8083r_firmware 2.24.00`
- `xnv-c8083r_firmware 2.24.00`
- `xnd-c8083rv_firmware 2.24.00`
- `xnb-6003_firmware 2.24.00`
- `xno-6083r_firmware 2.24.00`
- `xnv-6083r_firmware 2.24.00`
- `xnd-6083rv_firmware 2.24.00`
- `xno-8083r_firmware 2.24.00`
- `xnv-8093r_firmware 2.24.00`
- `xnv-8083r_firmware 2.24.00`
- `xnv-8083rvx_firmware 2.24.00`
- `xnd-8093rv__firmware 2.24.00`
- `xnd-8083rv__firmware 2.24.00`
- `xnd-8083rvx_firmware 2.24.00`
- `xnb-8003_firmware 2.24.00`
- `xnv-8083rx__firmware 2.24.00`
- `xnd-9083rv__firmware 2.24.00`
- `xno-9083r_firmware 2.24.00`
- `xnv-9083r_firmware 2.24.00`
- `xnb-9003_firmware 2.24.00`
- `xnv-6123r_firmware 2.24.00`
- `xno-6123r_firmware 2.24.00`
- `knd-5020rn_firmware 2.23.01`
- `xnd-8020r_firmware 2.23.01`
- `xnd-8020rw_firmware 2.23.01`
- `xnd-8030r_firmware 2.23.01`