CVE-2025-52599

CWE-269 — Improper Privilege Management3 documents3 sources

Severity

6.3MEDIUM

EPSS

0.0%

top 97.65%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

257

Hanwhavision Knb-2000 Firmware Hanwhavision Knb-5000n Firmware Hanwhavision Knd-2010 Firmware +254 more

Timeline

PublishedDec 26

Description

Cybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial Control Systems (ICS) and OT/IoT security, has discovered Inadequate of permission management for camera guest account. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

Affected Packages257 packages

▶NVDhanwhavision/knb-2000_firmware< 2.23.01

▶NVDhanwhavision/knd-2010_firmware< 2.23.01

▶NVDhanwhavision/qnf-8010_firmware< 2.10.03

▶NVDhanwhavision/qnp-6230_firmware< 2.23.01

▶NVDhanwhavision/qnp-6250_firmware< 2.23.01

🔴Vulnerability Details

CVEList

Inadequate account permissions management↗2025-12-26

▶

GHSA

GHSA-m4g6-6v9m-6q6x: Cybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial Control Systems (ICS) and OT/IoT security, has discovered Ina↗2025-12-26

▶