View CSAF

Summary

Successful exploitation of this vulnerability could allow an attacker to bypass authentication and have remote access to sensitive information on the device.

The following versions of Hangzhou Xiongmai Technology Co., Ltd XM530 IP Camera are affected:

IP Camera XM530V200_X6-WEQ_8M firmware V5.00.R02.000807D8.10010.346624.S.ONVIF_21.06 (CVE-2025-65856)

CVSS Vendor Equipment Vulnerabilities

v3 9.8 Hangzhou Xiongmai Technology Co., Ltd Hangzhou Xiongmai Technology Co., Ltd XM530 IP Camera Missing Authentication for Critical Function

Background

Critical Infrastructure Sectors: Commercial Facilities

Countries/Areas Deployed: Worldwide

Company Headquarters Location: China

Vulnerabilities

Expand All +

CVE-2025-65856

Authentication bypass vulnerability in Xiongmai XM530 IP cameras on Firmware V5.00.R02.000807D8.10010.346624.S.ONVIF 21.06 allows unauthenticated remote attackers to access sensitive device information and live video streams.…