CVE-2025-14748CWE-266CWE-284broken-access-control

CVE-2025-14748

Medium · published December 16, 2025

CVSS v3.1
5.4
EPSS
1%
Percentile
50.1
In the wild
Unconfirmed
What it is

A vulnerability was determined in Ningyuanda TC155 57.0.2.0. This affects an unknown function of the file /onvif/device_service of the component ONVIF Device Management Service. Executing manipulation of the argument FactoryDefault with the input Hard can lead to improper access controls. The attack requires access to the local network. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00641 · 50.1th percentile
Weaknesses
CWE-266 · Incorrect Privilege Assignment; CWE-284 · Improper Access Control
Published
2025-12-16T08:15Z
Affected products (1)
ProductVersionsFixed in
shenzhenningyuandatechnology/tc155_firmwareall versions—
References (4)
https://github.com/pwnpwnpur1n/IoT-advisories/blob/main/TC155-Unauth-Hard-Reset.md · [email protected]https://vuldb.com/?ctiid.336521 · [email protected]https://vuldb.com/?id.336521 · [email protected]https://vuldb.com/?submit.707197 · [email protected]
EPSS history
Timeline
  • 16 DEC 03:02Z
    Ningyuanda TC155 ONVIF Device Management Service device_service access control
    cvelistv5