https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-14749.htmlhttps://patchthecve.com/cve/CVE-2025-14749.htmlWed, 07 Oct 2026 19:10:00 +0000MEDIUM 6.3: A vulnerability was identified in Ningyuanda TC155 57.0.2.0. This impacts an unknown function of the file /onvif/device_service of the component ONVIF PTZ Control Interface. The manipulation leads to improper access controls. The attack requires being on the local network. The exploit is publicly avhttps://patchthecve.com/cve/CVE-2025-14748.htmlhttps://patchthecve.com/cve/CVE-2025-14748.htmlWed, 07 Oct 2026 19:10:00 +0000MEDIUM 5.4: A vulnerability was determined in Ningyuanda TC155 57.0.2.0. This affects an unknown function of the file /onvif/device_service of the component ONVIF Device Management Service. Executing manipulation of the argument FactoryDefault with the input Hard can lead to improper access controls. The attackhttps://patchthecve.com/cve/CVE-2025-14747.htmlhttps://patchthecve.com/cve/CVE-2025-14747.htmlWed, 07 Oct 2026 19:10:00 +0000MEDIUM 4.3: A vulnerability was found in Ningyuanda TC155 57.0.2.0. The impacted element is an unknown function of the component RTSP Service. Performing manipulation results in denial of service. The attack must originate from the local network. The exploit has been made public and could be used. The vendor wahttps://patchthecve.com/cve/CVE-2025-14746.htmlhttps://patchthecve.com/cve/CVE-2025-14746.htmlWed, 07 Oct 2026 19:10:00 +0000MEDIUM 4.3: A vulnerability has been found in Ningyuanda TC155 57.0.2.0. The affected element is an unknown function of the component RTSP Live Video Stream Endpoint. Such manipulation leads to improper authentication. The attack must be carried out from within the local network. The exploit has been disclosed