CVE-2025-14746
📋 TL;DR
This vulnerability allows unauthenticated access to the RTSP live video stream endpoint in Ningyuanda TC155 version 57.0.2.0. Attackers on the same local network can view live camera feeds without credentials. This affects organizations using this specific IoT device version for surveillance.
💻 Affected Systems
- Ningyuanda TC155
📦 What is this software?
Tc155 Firmware by Shenzhenningyuandatechnology
⚠️ Risk & Real-World Impact
Worst Case
Complete compromise of surveillance privacy with unauthorized live video access, potential blackmail or reconnaissance for physical security breaches.
Likely Case
Unauthorized viewing of live camera feeds, privacy violation, potential recording of sensitive activities.
If Mitigated
Limited impact if network segmentation prevents local network access from untrusted devices.
🎯 Exploit Status
Exploit disclosed on GitHub, requires local network access. Simple authentication bypass technique.
🛠️ Fix & Mitigation
✅ Official Fix
Patch Version: Unknown
Vendor Advisory: None available - vendor did not respond to disclosure
Restart Required: No
Instructions:
No official patch available. Consider workarounds or replacement.
🔧 Temporary Workarounds
Network Segmentation
allIsolate TC155 devices on separate VLAN from general user networks
Firewall RTSP Port Blocking
linuxBlock RTSP port (typically 554) access except from authorized monitoring systems
iptables -A INPUT -p tcp --dport 554 -j DROP
iptables -A INPUT -p udp --dport 554 -j DROP
🧯 If You Can't Patch
- Physically isolate TC155 network segment with no other devices
- Deploy network monitoring for RTSP traffic anomalies and unauthorized access attempts
🔍 How to Verify
Check if Vulnerable:
Attempt to access RTSP stream without authentication from local network: rtsp://[device_ip]:554/liveCheck Version:
Check device web interface or documentation for firmware versionVerify Fix Applied:
Verify authentication is required for RTSP stream access after implementing workarounds📡 Detection & Monitoring
Log Indicators:
- Unauthorized RTSP connection attempts
- Multiple failed authentication attempts to RTSP endpoint
Network Indicators:
- RTSP traffic from unexpected source IPs
- RTSP streams accessed without prior authentication
SIEM Query:
source_port=554 AND (NOT auth_success=true) OR (src_ip NOT IN authorized_monitoring_ips)