cvedb.io
CVE-2025-65857
HIGH · CVSS 7.5
EPSS exploitation probability: 0%
Published 2025-12-22T22:16:08.530 · Last modified 2026-06-17T09:56:01.820

Summary

An issue was discovered in Xiongmai XM530 IP cameras on firmware V5.00.R02.000807D8.10010.346624.S.ONVIF 21.06. The GetStreamUri exposes RTSP URIs containing hardcoded credentials enabling direct unauthorized video stream access.

Affected products

xiongmaitech — xm530v200_x6-weq_8m_firmware

Does this affect you?

Add your gear to cvedb and we'll alert you only when xiongmaitech ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.