What is the CVSS score of CVE-2025-1739?

CVE-2025-1739 has a CVSS 3.1 base score of 7.1 (High). CVSS vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N. EPSS exploitation probability: 0.1%.

Which versions of Trivision Camera NC227WF are affected by CVE-2025-1739?

Organizations using Trivision Camera NC227WF face moderate risk from CVE-2025-1739 rated CVSS 7.1. Exploitation could compromise the security of affected deployments.

How to fix or mitigate CVE-2025-1739?

Within 7 days: Identify all affected systems running Trivision Camera NC227WF and apply vendor patches promptly. Monitor vendor channels for patch availability.

Trivision Camera NC227WF CVE-2025-1739

HIGH

Authentication Bypass Using an Alternate Path or Channel (CWE-288)

2025-02-27 cve-coordination@incibe.es

Authentication Bypass

7.1

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.1 HIGH

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Attack Vector

Adjacent

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

Low

Availability

None

Lifecycle Timeline

Analysis Generated

Mar 28, 2026 - 18:28 vuln.today

CVE Published

Feb 27, 2025 - 13:15 nvd

HIGH 7.1

DescriptionCVE.org

An Authentication Bypass vulnerability has been found in Trivision Camera NC227WF v5.8.0 from TrivisionSecurity. This vulnerability allows an attacker to retrieve administrator's credentials in cleartext by sending a request against the server using curl with random credentials to "/en/player/activex_pal.asp" and successfully authenticating the application.

AnalysisAI

An Authentication Bypass vulnerability has been found in Trivision Camera NC227WF v5.8.0 from TrivisionSecurity. Rated high severity (CVSS 7.1), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-288. An Authentication Bypass vulnerability has been found in Trivision Camera NC227WF v5.8.0 from TrivisionSecurity. This vulnerability allows an attacker to retrieve administrator's credentials in cleartext by sending a request against the server using curl with random credentials to "/en/player/activex_pal.asp" and successfully authenticating the application.

Affected ProductsAI

Trivision Camera NC227WF v5.8.0 from TrivisionSecurity. This vulnerability.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.