Remenis

**Name of the Vulnerable Software and Affected Versions** Trivision NC-227WF firmware version 5.80 (build 20141010) **Description** The login mechanism in the software allows an attacker to determine if a username is valid by observing different error messages. Specifically, a “Unknown user” message indicates the username does not exist, while a “Wrong password” message confirms the username is valid. This enables username enumeration. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.