Approved changes feed: RSS · Atom

cpe:2.3:o:shenzhenningyuandatechnology:tc155_firmware:57.0.2.0:*:*:*:*:*:*:*

part: o version: 57.0.2.0 update: *

VendorShenzhenningyuandatechnology (17b6be12-5a1d-5d89-af89-08a11a557d7d)
ProductTc155 Firmware (e41e5fd4-dc17-575c-be01-496d453ab326)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-14749 vulnerable 2026-06-08 07:06:35.087586 Ningyuanda TC155 ONVIF PTZ Control device_service access control
MEDIUM (6.3)
A vulnerability was identified in Ningyuanda TC155 57.0.2.0. This impacts an unknown function of the file /onvif/device_service of the component ONVIF PTZ Control Interface. The manipulation leads to improper access controls. The attack requires being on the local network. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-12-16T03:02:10.508Z
Updated: 2025-12-16T20:48:27.694Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14748 vulnerable 2026-06-08 07:06:35.086888 Ningyuanda TC155 ONVIF Device Management Service device_service access control
MEDIUM (5.4)
A vulnerability was determined in Ningyuanda TC155 57.0.2.0. This affects an unknown function of the file /onvif/device_service of the component ONVIF Device Management Service. Executing manipulation of the argument FactoryDefault with the input Hard can lead to improper access controls. The attack requires access to the local network. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-12-16T03:02:08.269Z
Updated: 2025-12-16T21:01:07.215Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14747 vulnerable 2026-06-08 07:06:35.086384 Ningyuanda TC155 RTSP Service denial of service
MEDIUM (4.3)
A vulnerability was found in Ningyuanda TC155 57.0.2.0. The impacted element is an unknown function of the component RTSP Service. Performing manipulation results in denial of service. The attack must originate from the local network. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-12-16T02:02:08.910Z
Updated: 2025-12-16T21:23:49.880Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14746 vulnerable 2026-06-08 07:06:35.085079 Ningyuanda TC155 RTSP Live Video Stream Endpoint improper authentication
MEDIUM (4.3)
A vulnerability has been found in Ningyuanda TC155 57.0.2.0. The affected element is an unknown function of the component RTSP Live Video Stream Endpoint. Such manipulation leads to improper authentication. The attack must be carried out from within the local network. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-12-16T02:02:06.762Z
Updated: 2025-12-16T21:22:59.115Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.