Login Request a demo
Medium severity · published Dec 26, 2025
CVE-2025-52599
Inadequate account permissions management
6.5
CVSS
0.2%
EPSS
No
On KEV
Description
Cybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial Control Systems (ICS) and OT/IoT security, has discovered Inadequate of permission management for camera guest account. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 14% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
QN
QNV-C8012 · Hanwha Vision Co., Ltd.
Prior to version 2.22.05 · source: vendor
QF
Qnp-6250 Firmware · Hanwhavision
before 2.23.01 · source: NVD
QF
Qnp-6250h Firmware · Hanwhavision
before 2.23.01 · source: NVD
QF
Qnp-6320 Firmware · Hanwhavision
before 2.23.01 · source: NVD
QF
Qnp-6320h Firmware · Hanwhavision
before 2.23.01 · source: NVD
XF
Xnb-6003 Firmware · Hanwhavision
before 2.24.00 · source: NVD
XF
Xnb-8002 Firmware · Hanwhavision
before 2.24.00 · source: NVD
XF
Xnb-8003 Firmware · Hanwhavision
before 2.24.00 · source: NVD
XF
Xnb-9002 Firmware · Hanwhavision
before 2.24.00 · source: NVD
XF
Xnb-9003 Firmware · Hanwhavision
before 2.24.00 · source: NVD
XF
Xnd-6083rv Firmware · Hanwhavision
before 2.24.00 · source: NVD
XF
Xnd-8082rf Firmware · Hanwhavision
before 2.24.00 · source: NVD
Affected product
QN
QNV-C8012
Hanwha Vision Co., Ltd.
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-52599
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-52599
Vendor Advisory
https://www.hanwhavision.com/wp-content/uploads/2025/12/Camera-Vulnerability-ReportCVE-2025-5259852601-8075.pdf
More from QNV-C8012
7.2
CVE-2025-52600
Improper Input Validation
5.4
CVE-2025-8075
Improper Input Validation
3.7
CVE-2025-52598
Insufficient certificate validation