Login Request a demo
Low severity · published Dec 26, 2025
CVE-2025-52598
Insufficient certificate validation
3.7
CVSS
0.2%
EPSS
No
On KEV
Description
Cybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial Control Systems (ICS) and OT/IoT security, has found a flaw that camera's client service does not perform certificate validation. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Attack vector
Network
Complexity
High
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 8% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
QN
QNV-C8012 · Hanwha Vision Co., Ltd.
Prior to version 2.22.05 · source: vendor
TF
Tnv-c7013rc Firmware · Hanwhavision
before 2.24.00 · source: NVD
XF
Xnb-6002 Firmware · Hanwhavision
before 2.24.00 · source: NVD
XF
Xnb-6003 Firmware · Hanwhavision
before 2.24.00 · source: NVD
XF
Xnb-8002 Firmware · Hanwhavision
before 2.24.00 · source: NVD
XF
Xnb-8003 Firmware · Hanwhavision
before 2.24.00 · source: NVD
XF
Xnb-9002 Firmware · Hanwhavision
before 2.24.00 · source: NVD
XF
Xnb-9003 Firmware · Hanwhavision
before 2.24.00 · source: NVD
XF
Xnd-6083rv Firmware · Hanwhavision
before 2.24.00 · source: NVD
XF
Xnd-8082rf Firmware · Hanwhavision
before 2.24.00 · source: NVD
XF
Xnd-8082rv Firmware · Hanwhavision
before 2.24.00 · source: NVD
XF
Xnd-8083rv Firmware · Hanwhavision
before 2.24.00 · source: NVD
Affected product
QN
QNV-C8012
Hanwha Vision Co., Ltd.
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-52598
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-52598
Vendor Advisory
https://www.hanwhavision.com/wp-content/uploads/2025/12/Camera-Vulnerability-ReportCVE-2025-5259852601-8075.pdf
More from QNV-C8012
7.2
CVE-2025-52600
Improper Input Validation
6.5
CVE-2025-52599
Inadequate account permissions management
5.4
CVE-2025-8075
Improper Input Validation