CVE Intelligence

Vulnerabilidades de Shenzhenningyuandatechnology

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Shenzhenningyuandatechnology: 4 registro(s), com severidade, exploração e correções.

Somente exploradas (KEV) →

CVE-2025-14749 Alta · 8.8 CWE-266 16/12/2025
Ningyuanda TC155 ONVIF PTZ Control device_service access control
A vulnerability was identified in Ningyuanda TC155 57.0.2.0. This impacts an unknown function of the file /onvif/device_service of the component ONVIF PTZ Control Interface. The manipulation leads to improper access controls. The attack requires being on the local network. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2025-14748 Média · 5.4 CWE-266 16/12/2025
Ningyuanda TC155 ONVIF Device Management Service device_service access control
A vulnerability was determined in Ningyuanda TC155 57.0.2.0. This affects an unknown function of the file /onvif/device_service of the component ONVIF Device Management Service. Executing manipulation of the argument FactoryDefault with the input Hard can lead to improper access controls. The attack requires access to the local network. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2025-14747 Média · 6.5 CWE-404 16/12/2025
Ningyuanda TC155 RTSP Service denial of service
A vulnerability was found in Ningyuanda TC155 57.0.2.0. The impacted element is an unknown function of the component RTSP Service. Performing manipulation results in denial of service. The attack must originate from the local network. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2025-14746 Média · 6.5 CWE-287 16/12/2025
Ningyuanda TC155 RTSP Live Video Stream Endpoint improper authentication
A vulnerability has been found in Ningyuanda TC155 57.0.2.0. The affected element is an unknown function of the component RTSP Live Video Stream Endpoint. Such manipulation leads to improper authentication. The attack must be carried out from within the local network. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.