CVE-2025-1738

CVE-2025-1738 - Trivision Camera NC227WF PoC 📋 Overview Following responsible disclosure, two official CVEs were assigned. CVE| CVSS v3.1| Score| CWE| Type ---|---|---|---|--- CVE-2025-1738| AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N| 6.2| CWE-598| Cleartext Password Exposure 🔍 CVE-2025-1738 — Cleartext...

CVE-2025-1739

CVE-2025-1738 & CVE-2025-1739 — Trivision Camera NC227WF PoC 📋 Overview CVE| CVSS v3.1| Score| CWE| Type ---|---|---|---|--- CVE-2025-1739| AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N| 7.1| CWE-288| Authentication Bypass via Basic Auth Leak 🔓 CVE-2025-1739 — Basic Auth Code Exposure / Auth Bypass CWE-288...

CVE-2025-1738: Use of GET Request Method With Sensitive Query Strings

A Password Transmitted over Query String vulnerability has been found in Trivision Camera NC227WF v5.8.0 from TrivisionSecurity, exposing this sensitive information to a third party...

CVE-2025-1739: Authentication Bypass Using an Alternate Path or Channel

An Authentication Bypass vulnerability has been found in Trivision Camera NC227WF v5.8.0 from TrivisionSecurity. This vulnerability allows an attacker to retrieve administrator's credentials in cleartext by sending a request against the server using curl with random credentials to...

Trivision NC227WF security vulnerabilities

Trivision NC227WF is a webcam from Trivision. A security vulnerability exists in Trivision NC227WF version v5.8.0, which stems from a password being transmitted via a query string...

Trivision NC227WF security vulnerabilities

Trivision NC227WF is a webcam from Trivision. A security vulnerability exists in Trivision NC227WF version v5.8.0 that stems from an authentication bypass that allows retrieval of administrator credentials...

PT-2025-8940 · Trivision · Trivision Camera Nc227Wf

Name of the Vulnerable Software and Affected Versions: Trivision Camera NC227WF version 5.8.0 Description: An Authentication Bypass issue allows an attacker to retrieve administrator's credentials in cleartext. This is achieved by sending a request to the "/en/player/activex pal.asp" API endpoint...