High severity · published Dec 26, 2025
CVE-2025-52600
Improper Input Validation
7.2
CVSS
0.4%
EPSS
No
On KEV
Description
Cybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial Control Systems (ICS) and OT/IoT security, has discovered a vulnerability in camera video analytics that Improper input validation. This vulnerability could allow an attacker to execute specific commands on the user's host PC.The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 34% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
QN
QNV-C8012 · Hanwha Vision Co., Ltd.
Prior to version 2.22.05 · source: vendor
PF
Pnm-7002vd Firmware · Hanwhavision
before 2.23.00 · source: NVD
PF
Pnm-9002vq Firmware · Hanwhavision
before 2.23.00 · source: NVD
PF
Pnm-9084qz Firmware · Hanwhavision
before 2.23.00 · source: NVD
PF
Pnm-9085rqz Firmware · Hanwhavision
before 2.23.00 · source: NVD
TF
Tnv-c7013rc Firmware · Hanwhavision
before 2.24.00 · source: NVD
XF
Xnb-6002 Firmware · Hanwhavision
before 2.24.00 · source: NVD
XF
Xnb-6003 Firmware · Hanwhavision
before 2.24.00 · source: NVD
XF
Xnb-8002 Firmware · Hanwhavision
before 2.24.00 · source: NVD
XF
Xnb-8003 Firmware · Hanwhavision
before 2.24.00 · source: NVD
XF
Xnb-9002 Firmware · Hanwhavision
before 2.24.00 · source: NVD
XF
Xnb-9003 Firmware · Hanwhavision
before 2.24.00 · source: NVD