A vulnerability has been found in Ningyuanda TC155 57.0.2.0 and classified as critical. This impacts an unknown function of the file /onvif/device_service of the component ONVIF PTZ Control Interface. The manipulation leads to improper access controls.
This vulnerability is documented as CVE-2025-14749. The attack requires being on the local network. Additionally, an exploit exists.
The vendor was contacted early about this disclosure but did not respond in any way.
