CVE-2025-14747

A vulnerability was found in Ningyuanda TC155 57.0.2.0. The impacted element is an unknown function of the component RTSP Service. Performing manipulation results in denial of service. The attack must originate from the local network. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
References
Link Resource
https://github.com/pwnpwnpur1n/IoT-advisories/blob/main/TC155-Unauth-Malformed-RTSP-Describe-Request.md Exploit Third Party Advisory
https://vuldb.com/?ctiid.336520 Permissions Required VDB Entry
https://vuldb.com/?id.336520 Third Party Advisory VDB Entry
https://vuldb.com/?submit.707196 Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:shenzhenningyuandatechnology:tc155_firmware:57.0.2.0:*:*:*:*:*:*:*
cpe:2.3:h:shenzhenningyuandatechnology:tc155:-:*:*:*:*:*:*:*

History

18 Dec 2025, 21:23

Type Values Removed Values Added
CPE cpe:2.3:o:shenzhenningyuandatechnology:tc155_firmware:57.0.2.0:*:*:*:*:*:*:*
cpe:2.3:h:shenzhenningyuandatechnology:tc155:-:*:*:*:*:*:*:*
References () https://github.com/pwnpwnpur1n/IoT-advisories/blob/main/TC155-Unauth-Malformed-RTSP-Describe-Request.md - () https://github.com/pwnpwnpur1n/IoT-advisories/blob/main/TC155-Unauth-Malformed-RTSP-Describe-Request.md - Exploit, Third Party Advisory
References () https://vuldb.com/?ctiid.336520 - () https://vuldb.com/?ctiid.336520 - Permissions Required, VDB Entry
References () https://vuldb.com/?id.336520 - () https://vuldb.com/?id.336520 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?submit.707196 - () https://vuldb.com/?submit.707196 - Third Party Advisory, VDB Entry
First Time Shenzhenningyuandatechnology tc155 Firmware
Shenzhenningyuandatechnology
Shenzhenningyuandatechnology tc155

16 Dec 2025, 03:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-12-16 03:15

Updated : 2025-12-18 21:23


NVD link : CVE-2025-14747

Mitre link : CVE-2025-14747

CVE.ORG link : CVE-2025-14747


JSON object : View

Products Affected

shenzhenningyuandatechnology

  • tc155
  • tc155_firmware
CWE
CWE-404

Improper Resource Shutdown or Release