CVE-2025-52600

CWE-20 — Improper Input Validation3 documents3 sources

Severity

5.2MEDIUM

EPSS

0.0%

top 90.47%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

257

Hanwhavision Knb-2000 Firmware Hanwhavision Knb-5000n Firmware Hanwhavision Knd-2010 Firmware +254 more

Timeline

PublishedDec 26

Description

Cybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial Control Systems (ICS) and OT/IoT security, has discovered a vulnerability in camera video analytics that Improper input validation. This vulnerability could allow an attacker to execute specific commands on the user's host PC.The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H

Affected Packages257 packages

▶NVDhanwhavision/knb-2000_firmware< 2.23.01

▶NVDhanwhavision/knd-2010_firmware< 2.23.01

▶NVDhanwhavision/qnf-8010_firmware< 2.10.03

▶NVDhanwhavision/qnp-6230_firmware< 2.23.01

▶NVDhanwhavision/qnp-6250_firmware< 2.23.01

🔴Vulnerability Details

CVEList

Improper Input Validation↗2025-12-26

▶

GHSA

GHSA-5j73-c8q2-cfqp: Cybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial Control Systems (ICS) and OT/IoT security, has discovered a v↗2025-12-26

▶