CVE-2025-8075

Q: What is the severity of CVE-2025-8075?

CVE-2025-8075 has a CVSS score of 5.4 (MEDIUM). This CVE describes an XML validation vulnerability in unspecified products that could allow cross-site scripting (XSS) attacks. Attackers could inject malicious scripts through XML requests, potentially compromising user browsers. The vulnerability affects systems using the vulnerable XML processing components.

5.4 MEDIUM

Cross-Site Scripting

📋 TL;DR

This CVE describes an XML validation vulnerability in unspecified products that could allow cross-site scripting (XSS) attacks. Attackers could inject malicious scripts through XML requests, potentially compromising user browsers. The vulnerability affects systems using the vulnerable XML processing components.

💻 Affected Systems

Products:

Specific products not identified in provided description

Versions: Unknown - refer to manufacturer documentation

Operating Systems: Unknown

Default Config Vulnerable: ⚠️ Yes

Notes: Affects systems processing XML requests; exact products require manufacturer identification

📦 What is this software?

⚠️ Risk & Real-World Impact

🔴

Worst Case

Complete browser compromise leading to session hijacking, credential theft, or malware delivery to authenticated users

🟠

Likely Case

Limited XSS attacks resulting in session token theft or defacement of web interfaces

🟢

If Mitigated

No impact if proper input validation and output encoding are implemented

🌐 Internet-Facing: HIGH

🏢 Internal Only: MEDIUM

🎯 Exploit Status

Public PoC: ✅ No

Weaponized: UNKNOWN

Unauthenticated Exploit: ⚠️ Yes

Complexity: LOW

XSS vulnerabilities typically have low exploitation complexity; requires XML request injection

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: Unknown - refer to manufacturer firmware updates

Vendor Advisory: https://www.hanwhavision.com/wp-content/uploads/2025/12/Camera-Vulnerability-ReportCVE-2025-5259852601-8075.pdf

Restart Required: Yes

Instructions:

1. Download latest firmware from manufacturer 2. Backup current configuration 3. Apply firmware update 4. Restart device 5. Verify functionality

🔧 Temporary Workarounds

Input Validation Filter

all

Implement strict XML schema validation and sanitize all XML input

Content Security Policy

all

Implement CSP headers to restrict script execution

🧯 If You Can't Patch

Implement web application firewall with XSS protection rules
Isolate vulnerable systems from untrusted networks

🔍 How to Verify

Check if Vulnerable:

Test XML endpoints with XSS payloads; check if scripts execute

Check Version:

Manufacturer-specific command - consult device documentation

Verify Fix Applied:

Verify firmware version matches patched version; retest with XSS payloads

📡 Detection & Monitoring

Log Indicators:

Unusual XML request patterns
Script tags in XML payloads
Error logs from XML parsing

Network Indicators:

XML requests containing script elements
Unusual content-type headers

SIEM Query:

source="web_logs" AND (xml OR script OR javascript) AND status=200

📊 Metadata

CVE ID: CVE-2025-8075

CVSS v3 Score: 5.4 (MEDIUM)

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

CWE: CWE-20

EPSS Score: 0.05% exploit probability (16.4th percentile)

Published: December 26, 2025

Last Updated: January 7, 2026

🔗 References

https://www.hanwhavision.com/wp-content/uploads/2025/12/Camera-Vulnerability-ReportCVE-2025-5259852601-8075.pdf Vendor Advisory

📋 TL;DR

💻 Affected Systems

📦 What is this software?

Knb 2000 Firmware by Hanwhavision

Knb 5000n Firmware by Hanwhavision

Knd 2010 Firmware by Hanwhavision

Knd 2020rn Firmware by Hanwhavision

Knd 2080rn Firmware by Hanwhavision

Knd 5020rn Firmware by Hanwhavision

Knd 5080rn Firmware by Hanwhavision

Kno 2010rn Firmware by Hanwhavision

Kno 2080rn Firmware by Hanwhavision

Kno 2120rn Firmware by Hanwhavision

Kno 5020rn Firmware by Hanwhavision

Kno 5080rn Firmware by Hanwhavision

Knp 2120hn Firmware by Hanwhavision

Knp 2320rh Firmware by Hanwhavision

Knp 2320rha Firmware by Hanwhavision

Knp 2550rha Firmware by Hanwhavision

Pnm 7000vd Firmware by Hanwhavision

Pnm 7002vd Firmware by Hanwhavision

Pnm 9000vd Firmware by Hanwhavision

Pnm 9000vq Firmware by Hanwhavision

Pnm 9002vq Firmware by Hanwhavision

Pnm 9080vq Firmware by Hanwhavision

Pnm 9081vq Firmware by Hanwhavision

Pnm 9084qz Firmware by Hanwhavision

Pnm 9084qz1 Firmware by Hanwhavision

Pnm 9084rqz Firmware by Hanwhavision

Pnm 9084rqz1 Firmware by Hanwhavision

Pnm 9085rqz Firmware by Hanwhavision

Pnm 9085rqz1 Firmware by Hanwhavision

Pnm 9320vqp Firmware by Hanwhavision

Pnm 9321vqp Firmware by Hanwhavision

Pnm 9322vqp Firmware by Hanwhavision

Qnd C8013r Firmware by Hanwhavision

Qnd C8023r Firmware by Hanwhavision

Qne C8013rl Firmware by Hanwhavision

Qne C9013rl Firmware by Hanwhavision

Qnf 8010 Firmware by Hanwhavision

Qnf C9010 Firmware by Hanwhavision

Qnf C9010v Firmware by Hanwhavision

Qno C6083r Firmware by Hanwhavision

Qno C8013r Firmware by Hanwhavision

Qno C8023r Firmware by Hanwhavision

Qno C8083r Firmware by Hanwhavision

Qno C9083r Firmware by Hanwhavision

Qnp 6230 Firmware by Hanwhavision

Qnp 6230h Firmware by Hanwhavision

Qnp 6250 Firmware by Hanwhavision

Qnp 6250h Firmware by Hanwhavision

Qnp 6250r Firmware by Hanwhavision

Qnp 6320 Firmware by Hanwhavision

Qnp 6320h Firmware by Hanwhavision

Qnp 6320r Firmware by Hanwhavision

Qnv C6083r Firmware by Hanwhavision

Qnv C8011r Firmware by Hanwhavision

Qnv C8012 Firmware by Hanwhavision

Qnv C8013r Firmware by Hanwhavision

Qnv C8023r Firmware by Hanwhavision

Qnv C8083r Firmware by Hanwhavision

Qnv C9011r Firmware by Hanwhavision

Qnv C9083r Firmware by Hanwhavision

Tnb 6030 Firmware by Hanwhavision

Tnv 7010rc Firmware by Hanwhavision

Tnv C7013rc Firmware by Hanwhavision

Tnv C8011rw Firmware by Hanwhavision

Tnv C8014rm Firmware by Hanwhavision

Tnv C8034rm Firmware by Hanwhavision

Xnb 6000 Firmware by Hanwhavision

Xnb 6001 Firmware by Hanwhavision

Xnb 6002 Firmware by Hanwhavision

Xnb 6003 Firmware by Hanwhavision

Xnb 6005 Firmware by Hanwhavision

Xnb 8000 Firmware by Hanwhavision

Xnb 8002 Firmware by Hanwhavision

Xnb 8003 Firmware by Hanwhavision

Xnb 9002 Firmware by Hanwhavision

Xnb 9003 Firmware by Hanwhavision

Xnd 6010 Firmware by Hanwhavision