CVE-2025-52598 Insufficient certificate validation
An attacker can bypass certificate validation in the camera client service, potentially enabling man-in-the-middle attacks against the device.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-52598?
CVE-2025-52598 is a medium-severity vulnerability in Hanwha Vision Co., Ltd. QNV-C8012, published on 26 Dec 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Cybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial Control Systems (ICS) and OT/IoT security, has found a flaw that camera's client service does not perform certificate validation. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.
Weakness: CWE-295
Which versions are affected by CVE-2025-52598?
It affects 256 products.
Products include Hanwhavision Knb-2000 Firmware, Hanwhavision Knb-5000n Firmware, Hanwhavision Knd-2010 Firmware, Hanwhavision Knd-2020rn Firmware, Hanwhavision Knd-2080rn Firmware, Hanwhavision Knd-5020rn Firmware and 250 more.
How do I fix CVE-2025-52598?
No fix has been published for CVE-2025-52598 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-52598 being exploited?
There is no known exploitation of CVE-2025-52598 in the wild and no public exploit code.
Other vulnerabilities in Hanwha Vision Co., Ltd. QNV-C8012
Sources
Also known as GHSA-3679-62vm-qq5r.