Trivision NC-227WF firmware 5.80 (build 20141010) login mechanism reveals whether a username exists or not by returning different error messages ("Unknown user" vs. "Wrong password"), allowing an attacker to enumerate valid usernames.
Metrics
Affected Vendors & Products
No data.
No data.
No data.
No data.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
| Link | Providers |
|---|---|
| https://github.com/Remenis/CVE-2025-56764-trivision-nc227wf |
|
History
Mon, 29 Sep 2025 20:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-287 | |
| Metrics |
cvssV3_1
|
Mon, 29 Sep 2025 19:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Trivision NC-227WF firmware 5.80 (build 20141010) login mechanism reveals whether a username exists or not by returning different error messages ("Unknown user" vs. "Wrong password"), allowing an attacker to enumerate valid usernames. | |
| References |
|
MITRE
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2025-09-29T20:01:39.302Z
Reserved: 2025-08-17T00:00:00.000Z
Link: CVE-2025-56764
Vulnrichment
Updated: 2025-09-29T20:01:33.677Z
NVD
Status : Received
Published: 2025-09-29T20:15:33.700
Modified: 2025-09-29T20:15:33.700
Link: CVE-2025-56764
Redhat
No data.
OpenCVE Enrichment
No data.