CVE-2025-14746

MEDIUM

Ningyuanda TC155 57.0.2.0 - Improper Authentication in RTSP Live Video Stream Endpoint

Title source: llm
STIX 2.1

Description

A vulnerability has been found in Ningyuanda TC155 57.0.2.0. The affected element is an unknown function of the component RTSP Live Video Stream Endpoint. Such manipulation leads to improper authentication. The attack must be carried out from within the local network. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

References (4)

Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry
https://vuldb.com/?id.336519
Permissions Required, VDB Entry signature permissions-required
https://vuldb.com/?ctiid.336519
Third Party Advisory, VDB Entry third-party-advisory
https://vuldb.com/?submit.707195

Scores

CVSS v3 4.3
EPSS 0.0095
EPSS Percentile 56.4%
Attack Vector ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-287
Status published
Products (1)
shenzhenningyuandatechnology/tc155_firmware 57.0.2.0
Published Dec 16, 2025
Tracked Since Feb 18, 2026