| Title | Shenzhen Ningyuanda Technology Co., Ltd. TC155 IP Camera Firmware version: 57.0.2.0 Unauthenticated Hard Reset via ONVIF SetSystemFactoryDefault |
|---|
| Description | The TC155 IP Camera exposes the ONVIF Device Management service without authentication. An attacker on the local network can invoke the SetSystemFactoryDefault action with FactoryDefault=Hard, resulting in a full factory reset, loss of configuration, and temporary loss of availability. No credentials are required. |
|---|
| Source | ⚠️ https://github.com/pwnpwnpur1n/IoT-advisories/blob/main/TC155-Unauth-Hard-Reset.md |
|---|
| User | Anonymous User |
|---|
| Submission | 12/05/2025 11:49 (10 months ago) |
|---|
| Moderation | 12/15/2025 21:39 (10 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 336521 [Ningyuanda TC155 57.0.2.0 ONVIF Device Management Service /onvif/device_service FactoryDefault access control] |
|---|
| Points | 18 |
|---|