CVE-2025-65856 PoC — Xiongmai XM530 安全漏洞

Source

https://github.com/KostasEreksonas/XM_ONVIF_auth_bypass

Associated Vulnerability

Title: Xiongmai XM530 安全漏洞 (CVE-2025-65856)
Description:Authentication bypass vulnerability in Xiongmai XM530 IP cameras on Firmware V5.00.R02.000807D8.10010.346624.S.ONVIF 21.06 allows unauthenticated remote attackers to access sensitive device information and live video streams. The ONVIF implementation fails to enforce authentication on 31 critical endpoints, enabling direct unauthorized video stream access.

Description

Proof-of-concept code (Bash and Python) for CVE-2025-65856 where ONVIF implementation in in Xiongmai XM530 IP cameras allows for unauthenticated  access to sensitive device information and live video streams

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →