High severity · published Dec 26, 2025
CVE-2025-52601
Hardcoding sensitive information
7.8
CVSS
0.1%
EPSS
No
On KEV
Description
Cybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial Control Systems (ICS) and OT/IoT security, has discovered a vulnerability in Device Manager that a hardcoded encryption key for sensitive information. An attacker can use key to decrypt sensitive information. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 1% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DM
Device Manager · Hanwha Vision Co., Ltd.
prior to version 2.9.3.1 · source: vendor
TF
Tnv-c7013rc Firmware · Hanwhavision
before 2.24.00 · source: NVD
XF
Xnb-6002 Firmware · Hanwhavision
before 2.24.00 · source: NVD
XF
Xnb-6003 Firmware · Hanwhavision
before 2.24.00 · source: NVD
XF
Xnb-8002 Firmware · Hanwhavision
before 2.24.00 · source: NVD
XF
Xnb-8003 Firmware · Hanwhavision
before 2.24.00 · source: NVD
XF
Xnb-9002 Firmware · Hanwhavision
before 2.24.00 · source: NVD
XF
Xnb-9003 Firmware · Hanwhavision
before 2.24.00 · source: NVD
XF
Xnd-6083rv Firmware · Hanwhavision
before 2.24.00 · source: NVD
XF
Xnd-8082rf Firmware · Hanwhavision
before 2.24.00 · source: NVD
XF
Xnd-8082rv Firmware · Hanwhavision
before 2.24.00 · source: NVD
XF
Xnd-8083rv Firmware · Hanwhavision
before 2.24.00 · source: NVD