| Titel | Shenzhen Ningyuanda Technology Co., Ltd. TC155 IP Camera Firmware version: 57.0.2.0 Unauthenticated Hard Reset via ONVIF SetSystemFactoryDefault |
|---|
| Beschreibung | The TC155 IP Camera exposes the ONVIF Device Management service without authentication. An attacker on the local network can invoke the SetSystemFactoryDefault action with FactoryDefault=Hard, resulting in a full factory reset, loss of configuration, and temporary loss of availability. No credentials are required. |
|---|
| Quelle | ⚠️ https://github.com/pwnpwnpur1n/IoT-advisories/blob/main/TC155-Unauth-Hard-Reset.md |
|---|
| Benutzer | keroomi (UID 62127) |
|---|
| Einreichung | 05.12.2025 11:49 (vor 6 Monaten) |
|---|
| Moderieren | 15.12.2025 21:39 (10 days later) |
|---|
| Status | Akzeptiert |
|---|
| VulDB Eintrag | 336521 [Ningyuanda TC155 57.0.2.0 ONVIF Device Management Service /onvif/device_service FactoryDefault erweiterte Rechte] |
|---|
| Punkte | 18 |
|---|