XSS Vulnerability in Hanwha Techwin Products
CVE-2025-8075

5.8MEDIUM

Key Information:

Status
Vendor
CVE Published:
26 December 2025

What is CVE-2025-8075?

A security oversight regarding inadequate validation of incoming XML format request messages has been identified in Hanwha Techwin products. This vulnerability could enable an attacker to execute cross-site scripting (XSS) attacks, potentially compromising user sessions and data integrity. Users are urged to apply the patch firmware released by the manufacturer and consult the official report for detailed remediation strategies.

Affected Version(s)

QNV-C8012 Prior to version 2.22.05

References

CVSS V4

Score:
5.8
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-8075 : XSS Vulnerability in Hanwha Techwin Products