| عنوان | Shenzhen Ningyuanda Technology Co., Ltd. TC155 IP Camera Firmware Version 57.0.2.0 Missing Critical Step in Authentication |
|---|
| الوصف | The TC155 IP Camera is found to be susceptible to unauthenticated RTSP stream access, enabling adversaries within the same network segment to capture, record, and view the camera’s live video feed.
During an independent audit of the TC155 IP Camera, it was discovered that any adversary within the same network segment can capture, record and view the IP camera’s live video feed without any use of authentication through RTSP. This issue raises a privacy concern that any adversary within the same network can invade physical spaces without complexity. |
|---|
| المصدر | ⚠️ https://github.com/pwnpwnpur1n/IoT-advisories/blob/main/TC155-Unauth-RTSP.md |
|---|
| المستخدم | keroomi (UID 62127) |
|---|
| ارسال | 05/12/2025 11:42 AM (7 أشهر منذ) |
|---|
| الاعتدال | 15/12/2025 09:39 PM (10 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 336519 [Ningyuanda TC155 57.0.2.0 RTSP Live Video Stream Endpoint توثيق ضعيف] |
|---|
| النقاط | 20 |
|---|