← Back

CVE-2025-65856

nvd nist
Published: Dec 22, 2025Modified: Jan 5, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Authentication bypass vulnerability in Xiongmai XM530 IP cameras on Firmware V5.00.R02.000807D8.10010.346624.S.ONVIF 21.06 allows unauthenticated remote attackers to access sensitive device information and live video streams. The ONVIF implementation fails to enforce authentication on 31 critical endpoints, enabling direct unauthorized video stream access.

Affected (1)

Xiongmaitech
1 product
Xm530v200 X6 Weq 8m Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Xm530v200 X6 Weq 8m Firmware
Version 5.00.r02.000807d8.10010.346624.s.onvif_21.06
Running on/withPlatform Versions
Xiongmaitech
Xm530v200 X6 Weq 8m
All versions

Related CWEs

CWE-306
Missing Authentication for Critical Function
The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

References (3)

Source: cve@mitre.org
Not Applicable
Source: cve@mitre.org
Not Applicable
Source: cve@mitre.org
ExploitThird Party Advisory

Timeline

No history available yet.