CVE-2025-65856: Critical severity Xiongmai XM530 IP camera vulnerability
Authentication bypass vulnerability in Xiongmai XM530 IP cameras on Firmware V5.00.R02.000807D8.10010.346624.S.ONVIF 21.06 allows unauthenticated remote attackers to access sensitive device information and live video streams. The ONVIF implementation fails to enforce authentication on 31 critical endpoints, enabling direct unauthorized video stream access.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Verify that the camera firmware/enhanced ONVIF configuration enforces authentication on all ONVIF endpoints (the described issue is that authentication is not enforced on 31 critical endpoints, allowing unauthenticated access to live video streams and sensitive device information).
Xiongmai XM530 IP cameras (ONVIF service) ONVIF endpoint authentication enforcement = enabled - Compensating control
Restrict network access to the Xiongmai XM530 IP camera ONVIF service from untrusted networks (e.g., block/limit access via firewall/ACL so unauthenticated remote clients cannot reach the ONVIF 31 critical endpoints and access live video streams).
Event History
Frequently Asked Questions
What is the severity of CVE-2025-65856?
CVE-2025-65856 is considered a critical vulnerability due to its potential for allowing unauthorized access to sensitive information and live video feeds.
How do I fix CVE-2025-65856?
To fix CVE-2025-65856, it is recommended to update the Xiongmai XM530 IP camera to the latest firmware version that addresses this authentication bypass vulnerability.
Who is affected by CVE-2025-65856?
CVE-2025-65856 affects users of Xiongmai XM530 IP cameras running firmware V5.00.R02.000807D8.10010.346624.S.ONVIF 21.06.
What can attackers do with CVE-2025-65856?
Attackers exploiting CVE-2025-65856 can access sensitive device information and live video streams without authentication.
Is there a workaround for CVE-2025-65856?
Currently, no specific workarounds are available for CVE-2025-65856, and the best course of action is to apply the firmware update as soon as possible.