CVE-2025-65856

The implementation of the ONVIF protocol in the camera's firmware does not enforce authentication on 31 critical endpoints. An attacker can directly send requests to these endpoints without providing any authentication credentials. As a result, unauthorized access to video streams and device information over the network is possible without any user interaction.

An attacker can gain unauthorized access to live video streams and sensitive device information, leading to violation of confidentiality of monitored areas and potential exposure of camera configuration data.

Apply patches available from the manufacturer according to the references. Until updates are deployed, it is recommended to isolate cameras from the public network, use a firewall blocking access to ONVIF ports from untrusted networks, and place devices in a dedicated VLAN network segment with restricted access.

Xiongmai XM530 IP cameras (Xiongmaitech Xm530V200 X6-Weq 8M) with firmware version V5.00.R02.000807D8.10010.346624.S.ONVIF 21.06