Flaw in Camera Client Service from Hanwha Vision Lacks Certificate Validation
CVE-2025-52598

6.3MEDIUM

Key Information:

Vendor

Hanwha Vision Co., Ltd.

Status
Qnv-c8012
Vendor
CVE Published:
26 December 2025

What is CVE-2025-52598?

A significant vulnerability has been identified in the camera client service provided by Hanwha Vision, wherein the service fails to properly validate digital certificates. This could potentially expose users to various risks as unauthorized entities may exploit this flaw to intercept communications or impersonate legitimate devices, ultimately compromising the security of Industrial Control Systems (ICS) and Operational Technology (OT) environments. Users are urged to refer to the manufacturer's report for details on the firmware patch which addresses this issue, along with suggested workarounds to mitigate potential risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

QNV-C8012 Prior to version 2.22.05

References

https://www.hanwhavision.com/wp-content/uploads/2025/12/C...

CVSS V4

Score:
6.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.