NetSight
high7.8

CVE-2025-52601

Cybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial Control Systems (ICS) and OT/IoT security, has discovered a vulnerabil…

Impact

Cybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial Control Systems (ICS) and OT/IoT security, has discovered a vulnerability in Device Manager that a hardcoded encryption key for sensitive information. An attacker can use key to decrypt sensitive information. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.

Affected products

VendorProductAffected versions
HanwhavisionXno-8082r Firmware
before 2.24.00
HanwhavisionXnv-8082r Firmware
before 2.24.00
HanwhavisionXnd-8082rf Firmware
before 2.24.00
HanwhavisionXnd-8082rv Firmware
before 2.24.00
HanwhavisionXnb-8002 Firmware
before 2.24.00
HanwhavisionXno-9082rz Firmware
before 2.24.00
HanwhavisionXnv-9082r Firmware
before 2.24.00
HanwhavisionXnd-9082rf Firmware
before 2.24.00
HanwhavisionXnd-9082rv Firmware
before 2.24.00
HanwhavisionXnb-9002 Firmware
before 2.24.00
HanwhavisionXnf-9010rv Firmware
before 2.24.00
HanwhavisionXnf-9010rs Firmware
before 2.24.00

Weakness classification

References