Description (CNA)
An Authentication Bypass vulnerability has been found in Trivision Camera NC227WF v5.8.0 from TrivisionSecurity. This vulnerability allows an attacker to retrieve administrator's credentials in cleartext by sending a request against the server using curl with random credentials to "/en/player/activex_pal.asp" and successfully authenticating the application.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Trivision / Camera NC227WF | unaffected 5.8.0 |
CWE
CWE-288
References
- https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-trivision-camera-nc227wf
ADP enrichment
No English description supplied.
No references supplied.