VDB
CVE-2025-8075
CVE-2025-8075
PUBLISHED
CVSS 5.800000190734863 MEDIUM
Cybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial Control Systems (ICS) and OT/IoT security, has discovered that validation of incoming XML format request messages is inadequate. This vulnerability could allow an attacker to XSS on the user's browser. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.
EPSS 0.01% · 1.5th percentile
Risk Scores
CVSS 4.0
5.800000190734863
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H
EPSS Score
0.01%
1.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| hanwhavision | xnv-8081r_firmware | 0, 0 |
| hanwhavision | xnv-8081re__firmware | 0, 0 |
| hanwhavision | xnv-6081r_firmware | 0, 0 |
| hanwhavision | xnv-8093r_firmware | 0, 0 |
| hanwhavision | xnd-6081vz_firmware | 0, 0 |
| hanwhavision | xno-8040r_firmware | 0, 0 |
| hanwhavision | xnp-6320h_firmware | 0, 0 |
| hanwhavision | xnd-6085v_firmware | 0, 0 |
| hanwhavision | qnv-c9083r_firmware | 0, 0 |
| hanwhavision | xnp-c7310r__firmware | 0, 0 |
| hanwhavision | xnv-c7083r_firmware | 0, 0 |
| hanwhavision | xnd-8080r_firmware | 0, 0 |
| hanwhavision | xnv-8020r_firmware | 0, 0 |
| hanwhavision | xno-8030r_firmware | 0, 0 |
| hanwhavision | xno-6080r_firmware | 0, 0 |
| hanwhavision | knd-5080rn_firmware | 0, 0 |
| hanwhavision | xnv-8083rx__firmware | 0, 0 |
| hanwhavision | xnd-c7083rv_firmware | 0, 0 |
| hanwhavision | qne-c8013rl_firmware | 0, 0 |
| hanwhavision | qnd-c8013r_firmware | 0, 0 |
…and 237 more
Timeline
- Dec 26, 2025 EPSS Score
- Dec 26, 2025 CVE Published
- Dec 26, 2025 PoC Published
- Dec 26, 2025 PoC Published
- Dec 30, 2025 EPSS Score
- Jan 2, 2026 EPSS Score
- Jan 6, 2026 EPSS Score
- Jan 7, 2026 PoC Published
- Jan 9, 2026 EPSS Score
- Jan 13, 2026 EPSS Score
- Jan 17, 2026 EPSS Score
- Jan 20, 2026 EPSS Score