CVE-2025-14747

MEDIUM

Shenzhenningyuandatechnology Tc155 Fi... - Improper Resource Release

Title source: rule

Description

A vulnerability was found in Ningyuanda TC155 57.0.2.0. The impacted element is an unknown function of the component RTSP Service. Performing manipulation results in denial of service. The attack must originate from the local network. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

References (4)

[Third Party Advisory, VDB Entry] https://vuldb.com/?id.336520

[Permissions Required, VDB Entry] https://vuldb.com/?ctiid.336520

[Third Party Advisory, VDB Entry] https://vuldb.com/?submit.707196

[Exploit, Third Party Advisory] https://github.com/pwnpwnpur1n/IoT-advisories/blob/main/TC155-Unauth-Malformed-RTSP-Describe-Request.md

View Exploit ZIP pw:eip

Scores

CVSS v3 4.3

EPSS 0.0013

EPSS Percentile 31.4%

Attack Vector ADJACENT_NETWORK

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CISA SSVC

Vulnrichment

Exploitation poc

Automatable no

Technical Impact partial

Details

CWE

CWE-404

Status published

Products (1)

shenzhenningyuandatechnology/tc155_firmware 57.0.2.0

Published Dec 16, 2025

Tracked Since Feb 18, 2026