CVE Database
/

CVE-2025-8075

Back to search

CVE-2025-8075

Published: Dec 26, 2025

Modified: Dec 26, 2025

PUBLISHED

Description

Cybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial Control Systems (ICS) and OT/IoT security, has discovered that validation of incoming XML format request messages is inadequate. This vulnerability could allow an attacker to XSS on the user's browser. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.

VendorProductVersions

Hanwha Vision Co., Ltd.

QNV-C8012

affected
Prior to version 2.22.05

Weaknesses (CWE)

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now