PT-2025-53450 · Nozomi Networks · Nozomi Networks Os

Published 2025-12-26 · Updated 2025-12-26 · CVE-2025-8075

Positive Technologies (AI Summary)

CVSS v4.0

5.8

Medium

Base vector

AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions Nozomi Networks (affected versions not specified)

Description Inadequate validation of incoming XML format request messages can allow for cross-site scripting (XSS) attacks on a user's browser. The vulnerability affects Industrial Control Systems (ICS) and OT/IoT devices.

Recommendations Apply the patch firmware released by the manufacturer.

Fix

XSS

RCE

Weakness Enumeration

CWE-79

CWE-20

Related Identifiers

CVE-2025-8075

Affected Products

Nozomi Networks Os

References · 7

• https://hanwhavision.com/wp-content/uploads/2025/12/Camera-Vulnerability-ReportCVE-2025-5259852601-8075.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-8075 · Security Note
• https://osv.dev/vulnerability/CVE-2025-8075 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/2004430409413648799 · Twitter Post
• https://t.me/CVEtracker/40700 · Telegram Post
• https://t.me/cveNotify/146863 · Telegram Post
• https://twitter.com/CVEnew/status/2004457722314629596 · Twitter Post