TI-2025-01495 Aliases CVE-2025-1738 GHSA-6rjw-935f-mw9q

Multiple vulnerabilities in Trivision Camera NC227WF

LOW 27CWE-598Published 2025-02-27 · Updated 2025-02-27

Key facts

Attack vector: Local
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: High · None · None
Fix status: Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

A Password Transmitted over Query String vulnerability has been found in Trivision Camera NC227WF v5.8.0 from TrivisionSecurity, exposing this sensitive information to a third party.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00172 6th percentileScored 2026-11-07

Fix Fixed Camera NC227WF (Trivision): 5.8.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Trivision	Camera NC227WF	—	5.8.0	Patch available	CNA

Camera NC227WF VendorTrivision Affected — Fixed in 5.8.0 Patch available CNA

Remediation

Fix · CNA Camera NC227WF (Trivision) Fixed in 5.8.0

Timeline

2026-10-02 Threatist record created from CVE-2025-1738
2026-10-03 Alias added: GHSA-6rjw-935f-mw9q

References

Other 1

https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-trivision-camera-nc227wf

TI-2025-01496 Multiple vulnerabilities in Trivision Camera NC227WF CVSS 3.1HIGH 7.1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences