cvedb.io
CVE-2025-65856
CRITICAL · CVSS 9.8
EPSS exploitation probability: 0%
Published 2025-12-22T22:16:08.360 · Last modified 2026-06-17T09:56:01.663

Summary

Authentication bypass vulnerability in Xiongmai XM530 IP cameras on Firmware V5.00.R02.000807D8.10010.346624.S.ONVIF 21.06 allows unauthenticated remote attackers to access sensitive device information and live video streams. The ONVIF implementation fails to enforce authentication on 31 critical endpoints, enabling direct unauthorized video stream access.

Affected products

xiongmaitech — xm530v200_x6-weq_8m_firmware

Does this affect you?

Add your gear to cvedb and we'll alert you only when xiongmaitech ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.