提出 #707197: Shenzhen Ningyuanda Technology Co., Ltd. TC155 IP Camera Firmware version: 57.0.2.0 Unauthenticated Hard Reset via ONVIF SetSystemFactoryDefault情報

タイトルShenzhen Ningyuanda Technology Co., Ltd. TC155 IP Camera Firmware version: 57.0.2.0 Unauthenticated Hard Reset via ONVIF SetSystemFactoryDefault
説明The TC155 IP Camera exposes the ONVIF Device Management service without authentication. An attacker on the local network can invoke the SetSystemFactoryDefault action with FactoryDefault=Hard, resulting in a full factory reset, loss of configuration, and temporary loss of availability. No credentials are required.
ソース⚠️ https://github.com/pwnpwnpur1n/IoT-advisories/blob/main/TC155-Unauth-Hard-Reset.md
ユーザー
 keroomi (UID 62127)
送信2025年12月05日 11:49 (7 月 ago)
モデレーション2025年12月15日 21:39 (10 days later)
ステータス承諾済み
VulDBエントリ336521 [Ningyuanda TC155 57.0.2.0 ONVIF Device Management Service /onvif/device_service FactoryDefault 特権昇格]
ポイント18

Do you know our Splunk app?

Download it now for free!