CVE-2017-15236: Tiandy IP Camera Firmware

High severity, CVSS 7.5. EPSS: 3.6% chance of exploitation in the next 30 days.

Tiandy IP cameras 5.56.17.120 do not properly restrict a certain proprietary protocol, which allows remote attackers to read settings via a crafted request to TCP port 3001, as demonstrated by config* files and extendword.txt.

Affected products

• Tiandy Tiandy IP Camera Firmware: version 5.56.17.120 only

Published 2017-10-11. Last modified 2026-06-17.