CVE-2025-8075 - Improper Input Validation

Back Back to CVE browser

MEDIUM

Improper Input Validation

Published Dec 26, 2025

5.8

MEDIUM

CVSS 4.0

EPSS 0.20%

Description

Cybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial Control Systems (ICS) and OT/IoT security, has discovered that validation of incoming XML format request messages is inadequate. This vulnerability could allow an attacker to XSS on the user's browser. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.

Affected products

Vendor Hanwha Vision Co., Ltd. Product QNV-C8012 Default
unaffected
Affected
- Prior to version 2.22.05

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Hanwha Vision Co., Ltd.	QNV-C8012	unaffected	Affected Prior to version 2.22.05

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-20

Improper Input Validation

CWE-79

Cross-site Scripting (XSS)

References (2)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-205418		Advisory
https://www.hanwhavision.com/wp-content/uploads/2025/12/Camera-Vulnerability-ReportCVE-2025-5259852601-8075.pdf		Vendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner Hanwha_Vision

Published Dec 26, 2025

Updated Dec 26, 2025

Reserved Jul 23, 2025

Link CVE-2025-8075

CISA Vulnrichment

Updated Dec 26, 2025

NVD

Status Analyzed

Modified Oct 7, 2026

Link CVE-2025-8075

Red Hat

No data

ENISA EUVD

Assigner Hanwha_Vision

Published Dec 26, 2025

Updated Dec 26, 2025

Link EUVD-2025-205418

GitHub

No data