| Título | Shenzhen Ningyuanda Technology Co., Ltd. TC155 IP Camera Firmware version: 57.0.2.0 Unauthenticated Hard Reset via ONVIF SetSystemFactoryDefault |
|---|
| Descripción | The TC155 IP Camera exposes the ONVIF Device Management service without authentication. An attacker on the local network can invoke the SetSystemFactoryDefault action with FactoryDefault=Hard, resulting in a full factory reset, loss of configuration, and temporary loss of availability. No credentials are required. |
|---|
| Fuente | ⚠️ https://github.com/pwnpwnpur1n/IoT-advisories/blob/main/TC155-Unauth-Hard-Reset.md |
|---|
| Usuario | keroomi (UID 62127) |
|---|
| Sumisión | 2025-12-05 11:49 (hace 7 meses) |
|---|
| Moderación | 2025-12-15 21:39 (10 days later) |
|---|
| Estado | Aceptado |
|---|
| Entrada de VulDB | 336521 [Ningyuanda TC155 57.0.2.0 ONVIF Device Management Service /onvif/device_service FactoryDefault escalada de privilegios] |
|---|
| Puntos | 18 |
|---|