| Titolo | Shenzhen Ningyuanda Technology Co., Ltd. TC155 IP Camera Firmware version: 57.0.2.0 Unauthenticated Hard Reset via ONVIF SetSystemFactoryDefault |
|---|
| Descrizione | The TC155 IP Camera exposes the ONVIF Device Management service without authentication. An attacker on the local network can invoke the SetSystemFactoryDefault action with FactoryDefault=Hard, resulting in a full factory reset, loss of configuration, and temporary loss of availability. No credentials are required. |
|---|
| Fonte | ⚠️ https://github.com/pwnpwnpur1n/IoT-advisories/blob/main/TC155-Unauth-Hard-Reset.md |
|---|
| Utente | keroomi (UID 62127) |
|---|
| Sottomissione | 05/12/2025 11:49 (6 mesi fa) |
|---|
| Moderazione | 15/12/2025 21:39 (10 days later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 336521 [Ningyuanda TC155 57.0.2.0 ONVIF Device Management Service /onvif/device_service FactoryDefault escalationi di privilegi] |
|---|
| Punti | 18 |
|---|