This vulnerability affects the ONVIF implementation in Xiongmai XM530 IP cameras on the specified firmware version. Due to failure in enforcing authentication on multiple critical endpoints, remote attackers can bypass authentication controls and directly access sensitive information and live video streams. The CVSS score of 9.8 indicates a critical severity with network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. No patch or remediation information is currently provided.

Unauthenticated remote attackers can gain unauthorized access to sensitive device information and live video streams on affected Xiongmai XM530 IP cameras. This compromises confidentiality, integrity, and availability of the device and its data, potentially exposing private surveillance footage and device configuration details.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict network access to affected devices, especially from untrusted networks, to reduce exposure. Monitor vendor channels for updates and apply patches promptly once released.