{"cve":"CVE-2025-52598","nvd":{"published":"2025-12-26T05:16:07.383","modified":"2026-10-07T13:10:00.713","status":"Analyzed","description":"Cybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial Control Systems (ICS) and OT/IoT security, has found a flaw that camera's client service does not perform certificate validation. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.","cvss_v4":{"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","score":6.3},"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","score":3.7},"cwes":["CWE-295"],"references":["https://www.hanwhavision.com/wp-content/uploads/2025/12/Camera-Vulnerability-ReportCVE-2025-5259852601-8075.pdf"],"products":["hanwhavision:knb-2000_firmware","hanwhavision:knb-5000n_firmware","hanwhavision:knd-2010_firmware","hanwhavision:knd-2020rn_firmware","hanwhavision:knd-2080rn_firmware","hanwhavision:knd-5020rn_firmware","hanwhavision:knd-5080rn_firmware","hanwhavision:kno-2010rn_firmware","hanwhavision:kno-2080rn_firmware","hanwhavision:kno-2120rn_firmware","hanwhavision:kno-5020rn_firmware","hanwhavision:kno-5080rn_firmware","hanwhavision:knp-2120hn_firmware","hanwhavision:knp-2320rh_firmware","hanwhavision:knp-2320rha_firmware","hanwhavision:knp-2550rha_firmware","hanwhavision:pnm-7000vd_firmware","hanwhavision:pnm-7002vd_firmware","hanwhavision:pnm-9000vd_firmware","hanwhavision:pnm-9000vq_firmware","hanwhavision:pnm-9002vq_firmware","hanwhavision:pnm-9080vq_firmware","hanwhavision:pnm-9081vq_firmware","hanwhavision:pnm-9084qz1_firmware","hanwhavision:pnm-9084qz_firmware","hanwhavision:pnm-9084rqz1_firmware","hanwhavision:pnm-9084rqz_firmware","hanwhavision:pnm-9085rqz1_firmware","hanwhavision:pnm-9085rqz_firmware","hanwhavision:pnm-9320vqp_firmware","hanwhavision:pnm-9321vqp_firmware","hanwhavision:pnm-9322vqp_firmware","hanwhavision:qnd-c8013r_firmware","hanwhavision:qnd-c8023r_firmware","hanwhavision:qne-c8013rl_firmware","hanwhavision:qne-c9013rl_firmware","hanwhavision:qnf-8010_firmware","hanwhavision:qnf-c9010_firmware","hanwhavision:qnf-c9010v_firmware","hanwhavision:qno-c6083r_firmware","hanwhavision:qno-c8013r_firmware","hanwhavision:qno-c8023r_firmware","hanwhavision:qno-c8083r_firmware","hanwhavision:qno-c9083r_firmware","hanwhavision:qnp-6230_firmware","hanwhavision:qnp-6230h_firmware","hanwhavision:qnp-6250_firmware","hanwhavision:qnp-6250h_firmware","hanwhavision:qnp-6250r_firmware","hanwhavision:qnp-6320_firmware"],"source":"nvd","synced_at":"2026-10-19T22:18:08.089039631+00:00"},"epss":{"cve":"CVE-2025-52598","score":0.00181,"percentile":0.07565,"date":"2026-10-25"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}