CVE-2026-110825

The Kiloview E3 NDI encoder is affected by a vulnerability where the ONVIF device service fails to require authentication for critical configuration write operations. An unauthenticated remote attacker can modify the hostname , DNS resolution , or NTP configuration . This allows for follow-on att...

CVE-2026-111100 Kiloview E3 NDI Encoder Missing Authentication for Critical Function

The ONVIF device service on the E3 responds to certain informational requests without requiring authentication. A remote, unauthenticated party can retrieve detailed device identifiers along with a list of configured user accounts and their privilege levels. This aids attackers in fingerprinting...

CVE-2026-111100

The Kiloview E3 NDI Encoder is impacted by a missing authentication vulnerability in its ONVIF device service . A remote, unauthenticated party can send specific informational requests to retrieve detailed device identifiers and a list of configured user accounts including their privilege levels....

CVE-2025-14748

A vulnerability was determined in Ningyuanda TC155 57.0.2.0. This affects an unknown function of the file /onvif/deviceservice of the component ONVIF Device Management Service. Executing manipulation of the argument FactoryDefault with the input Hard can lead to improper access controls. The atta...

CVE-2025-14748

A vulnerability was determined in Ningyuanda TC155 57.0.2.0. This affects an unknown function of the file /onvif/deviceservice of the component ONVIF Device Management Service. Executing manipulation of the argument FactoryDefault with the input Hard can lead to improper access controls. The atta...

EUVD-2025-203496

A vulnerability was identified in Ningyuanda TC155 57.0.2.0. This impacts an unknown function of the file /onvif/deviceservice of the component ONVIF PTZ Control Interface. The manipulation leads to improper access controls. The attack requires being on the local network. The exploit is publicly...

EUVD-2025-203495

A vulnerability was determined in Ningyuanda TC155 57.0.2.0. This affects an unknown function of the file /onvif/deviceservice of the component ONVIF Device Management Service. Executing manipulation of the argument FactoryDefault with the input Hard can lead to improper access controls. The atta...

PT-2025-42525

Name of the Vulnerable Software and Affected Versions Apeman ID71 version 218.53.203.117 Description A security issue exists in the ONVIF Service component of Apeman ID71. Specifically, a manipulation of an unknown function within the /onvif/device service file results in missing authentication...

CVE-2017-14743

Faleemi FSC-880 00.01.01.0048P2 devices allow unauthenticated SQL injection via the Username element in an XML document to /onvif/deviceservice, as demonstrated by reading the admin password...

PT-2018-12710

Name of the Vulnerable Software and Affected Versions VIVOTEK FD8177 devices affected versions not specified Description The issue allows remote attackers to execute arbitrary code via the ONVIF interface, specifically through the /onvif/device service API endpoint. Recommendations At the moment,...

CVE-2017-14743

Faleemi FSC-880 00.01.01.0048P2 devices allow unauthenticated SQL injection via the Username element in an XML document to /onvif/deviceservice, as demonstrated by reading the admin password...

PT-2017-13662

Name of the Vulnerable Software and Affected Versions Faleemi FSC-880 version 00.01.01.0048P2 Description The issue allows unauthenticated SQL injection via the Username element in an XML document to the "/onvif/device service" API endpoint, which can be exploited to read the admin password...