PT-2026-99761

Name of the Vulnerable Software and Affected Versions Eyeplus version 57.0.0.0308 Description A remote information disclosure issue exists within the ONVIF component. The flaw is located in the GetUsers function of the /onvif/Device file, allowing an attacker to remotely obtain sensitive...

CVE-2025-14748

A vulnerability was determined in Ningyuanda TC155 57.0.2.0. This affects an unknown function of the file /onvif/deviceservice of the component ONVIF Device Management Service. Executing manipulation of the argument FactoryDefault with the input Hard can lead to improper access controls. The atta...

CVE-2025-14748

A vulnerability was determined in Ningyuanda TC155 57.0.2.0. This affects an unknown function of the file /onvif/deviceservice of the component ONVIF Device Management Service. Executing manipulation of the argument FactoryDefault with the input Hard can lead to improper access controls. The atta...

CVE-2025-14748

A vulnerability was determined in Ningyuanda TC155 57.0.2.0. This affects an unknown function of the file /onvif/deviceservice of the component ONVIF Device Management Service. Executing manipulation of the argument FactoryDefault with the input Hard can lead to improper access controls. The atta...

EUVD-2025-203496

A vulnerability was identified in Ningyuanda TC155 57.0.2.0. This impacts an unknown function of the file /onvif/deviceservice of the component ONVIF PTZ Control Interface. The manipulation leads to improper access controls. The attack requires being on the local network. The exploit is publicly...

CVE-2025-14748

CVE-2025-14748 affects Ningyuanda TC155 57.0.2.0, specifically the ONVIF Device Management Service component at /onvif/device_service. The root cause is manipulation of the FactoryDefault argument with the input Hard, enabling improper access controls. Access is required on the local network, and...

CVE-2025-14748 Ningyuanda TC155 ONVIF Device Management Service device_service access control

A vulnerability was determined in Ningyuanda TC155 57.0.2.0. This affects an unknown function of the file /onvif/deviceservice of the component ONVIF Device Management Service. Executing manipulation of the argument FactoryDefault with the input Hard can lead to improper access controls. The atta...

EUVD-2025-203495

A vulnerability was determined in Ningyuanda TC155 57.0.2.0. This affects an unknown function of the file /onvif/deviceservice of the component ONVIF Device Management Service. Executing manipulation of the argument FactoryDefault with the input Hard can lead to improper access controls. The atta...

CVE-2025-14748: Improper Access Control

A vulnerability was determined in Ningyuanda TC155 57.0.2.0. This affects an unknown function of the file /onvif/deviceservice of the component ONVIF Device Management Service. Executing manipulation of the argument FactoryDefault with the input Hard can lead to improper access controls. The atta...

PT-2025-42525

Name of the Vulnerable Software and Affected Versions Apeman ID71 version 218.53.203.117 Description A security issue exists in the ONVIF Service component of Apeman ID71. Specifically, a manipulation of an unknown function within the /onvif/device service file results in missing authentication...

CVE-2017-14743

Faleemi FSC-880 00.01.01.0048P2 devices allow unauthenticated SQL injection via the Username element in an XML document to /onvif/deviceservice, as demonstrated by reading the admin password...

Foscam Opticam i5 Denial of Service Vulnerability

Foscam Opticam i5 is an IP camera from FOSCAM. A denial of service vulnerability exists in the ONVIF devicemgmt SystemReboot method of the Foscam Opticam i5 with system firmware 1.5.2.11 and application firmware 2.21.1.128. An unauthenticated attacker could exploit this vulnerability to cause the...

PT-2018-12710

Name of the Vulnerable Software and Affected Versions VIVOTEK FD8177 devices affected versions not specified Description The issue allows remote attackers to execute arbitrary code via the ONVIF interface, specifically through the /onvif/device service API endpoint. Recommendations At the moment,...

CVE-2017-14743

Faleemi FSC-880 00.01.01.0048P2 devices allow unauthenticated SQL injection via the Username element in an XML document to /onvif/deviceservice, as demonstrated by reading the admin password...

PT-2017-13662

Name of the Vulnerable Software and Affected Versions Faleemi FSC-880 version 00.01.01.0048P2 Description The issue allows unauthenticated SQL injection via the Username element in an XML document to the "/onvif/device service" API endpoint, which can be exploited to read the admin password...