| 제목 | Shenzhen Ningyuanda Technology Co., Ltd. TC155 IP Camera Firmware Version 57.0.2.0 Missing Critical Step in Authentication |
|---|
| 설명 | The TC155 IP Camera is found to be susceptible to unauthenticated RTSP stream access, enabling adversaries within the same network segment to capture, record, and view the camera’s live video feed.
During an independent audit of the TC155 IP Camera, it was discovered that any adversary within the same network segment can capture, record and view the IP camera’s live video feed without any use of authentication through RTSP. This issue raises a privacy concern that any adversary within the same network can invade physical spaces without complexity. |
|---|
| 원천 | ⚠️ https://github.com/pwnpwnpur1n/IoT-advisories/blob/main/TC155-Unauth-RTSP.md |
|---|
| 사용자 | keroomi (UID 62127) |
|---|
| 제출 | 2025. 12. 05. AM 11:42 (6 개월 ago) |
|---|
| 모더레이션 | 2025. 12. 15. PM 09:39 (10 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 336519 [Ningyuanda TC155 57.0.2.0 RTSP Live Video Stream Endpoint 약한 인증] |
|---|
| 포인트들 | 20 |
|---|