CVE-2025-52599

Q: What is the severity of CVE-2025-52599?

CVE-2025-52599 has a CVSS score of 6.5 (MEDIUM). This vulnerability involves inadequate permission management for camera guest accounts in Hanwha Vision cameras, allowing unauthorized access to sensitive functions. It affects industrial control systems and IoT devices using these cameras, particularly in OT environments where cameras may have network connectivity.

6.5 MEDIUM

Authentication Bypass

📋 TL;DR

This vulnerability involves inadequate permission management for camera guest accounts in Hanwha Vision cameras, allowing unauthorized access to sensitive functions. It affects industrial control systems and IoT devices using these cameras, particularly in OT environments where cameras may have network connectivity.

💻 Affected Systems

Products:

Hanwha Vision cameras

Versions: Specific versions not detailed in provided reference; consult manufacturer report

Operating Systems: Embedded camera firmware

Default Config Vulnerable: ⚠️ Yes

Notes: Affects cameras with guest account functionality enabled; industrial and enterprise deployments most at risk

📦 What is this software?

⚠️ Risk & Real-World Impact

🔴

Worst Case

Attackers gain full administrative control over camera systems, enabling video stream interception, camera manipulation, and potential lateral movement into connected OT networks.

🟠

Likely Case

Unauthorized users access camera settings, video feeds, or configuration data that should be restricted to guest accounts.

🟢

If Mitigated

Limited impact with proper network segmentation and access controls preventing unauthorized network access to cameras.

🌐 Internet-Facing: HIGH

🏢 Internal Only: MEDIUM

🎯 Exploit Status

Public PoC: ✅ No

Weaponized: UNKNOWN

Unauthenticated Exploit: ✅ No

Complexity: LOW

Exploitation likely requires network access to camera interface; guest account access needed as starting point

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: Not specified in provided data; check manufacturer firmware updates

Vendor Advisory: https://www.hanwhavision.com/wp-content/uploads/2025/12/Camera-Vulnerability-ReportCVE-2025-5259852601-8075.pdf

Restart Required: Yes

Instructions:

1. Download latest firmware from Hanwha Vision support portal. 2. Backup camera configuration. 3. Apply firmware update via web interface or management software. 4. Verify guest account permissions are properly restricted post-update.

🔧 Temporary Workarounds

Disable guest accounts

all

Remove or disable guest account functionality on affected cameras

Network segmentation

all

Isolate cameras in separate VLANs with strict firewall rules

🧯 If You Can't Patch

Implement strict network access controls to camera management interfaces
Disable all guest accounts and use only authenticated administrative access

🔍 How to Verify

Check if Vulnerable:

Check if guest accounts can access administrative functions or restricted camera settings

Check Version:

Check firmware version in camera web interface or via manufacturer management software

Verify Fix Applied:

Test guest account permissions after firmware update; verify they cannot access privileged functions

📡 Detection & Monitoring

Log Indicators:

Unauthorized access attempts to camera administrative functions
Guest account activity in privileged logs

Network Indicators:

Unusual traffic patterns to camera management ports
Authentication bypass attempts

SIEM Query:

source="camera_logs" AND (event="privileged_access" OR user="guest")

📊 Metadata

CVE ID: CVE-2025-52599

CVSS v3 Score: 6.5 (MEDIUM)

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

CWE: CWE-269

EPSS Score: 0.04% exploit probability (12th percentile)

Published: December 26, 2025

Last Updated: January 7, 2026

🔗 References

https://www.hanwhavision.com/wp-content/uploads/2025/12/Camera-Vulnerability-ReportCVE-2025-5259852601-8075.pdf Vendor Advisory

📋 TL;DR

💻 Affected Systems

📦 What is this software?

Knb 2000 Firmware by Hanwhavision

Knb 5000n Firmware by Hanwhavision

Knd 2010 Firmware by Hanwhavision

Knd 2020rn Firmware by Hanwhavision

Knd 2080rn Firmware by Hanwhavision

Knd 5020rn Firmware by Hanwhavision

Knd 5080rn Firmware by Hanwhavision

Kno 2010rn Firmware by Hanwhavision

Kno 2080rn Firmware by Hanwhavision

Kno 2120rn Firmware by Hanwhavision

Kno 5020rn Firmware by Hanwhavision

Kno 5080rn Firmware by Hanwhavision

Knp 2120hn Firmware by Hanwhavision

Knp 2320rh Firmware by Hanwhavision

Knp 2320rha Firmware by Hanwhavision

Knp 2550rha Firmware by Hanwhavision

Pnm 7000vd Firmware by Hanwhavision

Pnm 7002vd Firmware by Hanwhavision

Pnm 9000vd Firmware by Hanwhavision

Pnm 9000vq Firmware by Hanwhavision

Pnm 9002vq Firmware by Hanwhavision

Pnm 9080vq Firmware by Hanwhavision

Pnm 9081vq Firmware by Hanwhavision

Pnm 9084qz Firmware by Hanwhavision

Pnm 9084qz1 Firmware by Hanwhavision

Pnm 9084rqz Firmware by Hanwhavision

Pnm 9084rqz1 Firmware by Hanwhavision

Pnm 9085rqz Firmware by Hanwhavision

Pnm 9085rqz1 Firmware by Hanwhavision

Pnm 9320vqp Firmware by Hanwhavision

Pnm 9321vqp Firmware by Hanwhavision

Pnm 9322vqp Firmware by Hanwhavision

Qnd C8013r Firmware by Hanwhavision

Qnd C8023r Firmware by Hanwhavision

Qne C8013rl Firmware by Hanwhavision

Qne C9013rl Firmware by Hanwhavision

Qnf 8010 Firmware by Hanwhavision

Qnf C9010 Firmware by Hanwhavision

Qnf C9010v Firmware by Hanwhavision

Qno C6083r Firmware by Hanwhavision

Qno C8013r Firmware by Hanwhavision

Qno C8023r Firmware by Hanwhavision

Qno C8083r Firmware by Hanwhavision

Qno C9083r Firmware by Hanwhavision

Qnp 6230 Firmware by Hanwhavision

Qnp 6230h Firmware by Hanwhavision

Qnp 6250 Firmware by Hanwhavision

Qnp 6250h Firmware by Hanwhavision

Qnp 6250r Firmware by Hanwhavision

Qnp 6320 Firmware by Hanwhavision

Qnp 6320h Firmware by Hanwhavision

Qnp 6320r Firmware by Hanwhavision

Qnv C6083r Firmware by Hanwhavision

Qnv C8011r Firmware by Hanwhavision

Qnv C8012 Firmware by Hanwhavision

Qnv C8013r Firmware by Hanwhavision

Qnv C8023r Firmware by Hanwhavision

Qnv C8083r Firmware by Hanwhavision

Qnv C9011r Firmware by Hanwhavision

Qnv C9083r Firmware by Hanwhavision

Tnb 6030 Firmware by Hanwhavision

Tnv 7010rc Firmware by Hanwhavision

Tnv C7013rc Firmware by Hanwhavision

Tnv C8011rw Firmware by Hanwhavision

Tnv C8014rm Firmware by Hanwhavision

Tnv C8034rm Firmware by Hanwhavision

Xnb 6000 Firmware by Hanwhavision

Xnb 6001 Firmware by Hanwhavision

Xnb 6002 Firmware by Hanwhavision

Xnb 6003 Firmware by Hanwhavision

Xnb 6005 Firmware by Hanwhavision

Xnb 8000 Firmware by Hanwhavision

Xnb 8002 Firmware by Hanwhavision

Xnb 8003 Firmware by Hanwhavision

Xnb 9002 Firmware by Hanwhavision

Xnb 9003 Firmware by Hanwhavision

Xnd 6010 Firmware by Hanwhavision