CVE-2025-35451 (GCVE-0-2025-35451)
Vulnerability from cvelistv5
Published
2025-09-05 17:43
Modified
2025-09-08 18:08
Severity ?
9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.3 (Critical) - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CWE
  • CWE-798 - Use of Hard-coded Credentials
Summary
PTZOptics and possibly other ValueHD-based pan-tilt-zoom cameras use hard-coded, default administrative credentials. The passwords can readily be cracked. Many cameras have SSH or telnet listening on all interfaces. The passwords cannot be changed by the user, nor can the SSH or telnet service be disabled by the user.
References
9119a7d8-5eab-497f-8521-727c672e3725https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-162-10.json
9119a7d8-5eab-497f-8521-727c672e3725https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-10
9119a7d8-5eab-497f-8521-727c672e3725https://www.cve.org/CVERecord?id=CVE-2025-35451
9119a7d8-5eab-497f-8521-727c672e3725https://www.greynoise.io/blog/greynoise-intelligence-discovers-zero-day-vulnerabilities-in-live-streaming-cameras-with-the-help-of-ai
9119a7d8-5eab-497f-8521-727c672e3725https://www.labs.greynoise.io/grimoire/2024-10-31-sift-0-day-rce/
Impacted products
Vendor Product Version
PTZOptics PT12X-SE-xx-G3 Version: 0   < 9.1.43
 Create a notification for this product.
   PTZOptics PT12X-LINK-4K-xx Version: 0   < 0.0.63
 Create a notification for this product.
   PTZOptics PT20X-SE-xx-G3 Version: 0   < 9.1.32
 Create a notification for this product.
   PTZOptics PT20X-LINK-4K-xx Version: 0   < 0.0.89
 Create a notification for this product.
   PTZOptics PT-STUDIOPRO Version: 0   < 9.0.41
 Create a notification for this product.
   PTZOptics PT30X-SE-xx-G3 Version: 0   < 9.1.33
 Create a notification for this product.
   PTZOptics PT30X-LINK-4K-xx Version: 0   < 2.0.71
 Create a notification for this product.
   PTZOptics PT12X-STUDIO-4K-xx-G3 Version: 0   < 8.1.90
 Create a notification for this product.
   PTZOptics PT20X-STUDIO-4K-xx-G3 Version: 0   < 8.1.90
 Create a notification for this product.
   PTZOptics PT12X-SDI/NDI-xx Version: 0   < 6.3.70
 Create a notification for this product.
   PTZOptics PT12X-USB-xx Version: 0   < 6.2.88
 Create a notification for this product.
   PTZOptics PT20X-SDI/NDI-xx Version: 0   < 6.3.27
 Create a notification for this product.
   SMTAV Pan-Tilt-Zoom Cameras Version: *
 Create a notification for this product.
   PTZOptics PT30X-SDI/NDI-xx Version: 0   < 6.3.43
 Create a notification for this product.
   multiCAM Systems Pan-Tilt-Zoom Cameras Version: *
 Create a notification for this product.
   PTZOptics VL Fixed Camera/NDI Fixed Camera Version: 0   < 7.2.94
 Create a notification for this product.
   PTZOptics 12x Fixed Camera/NDI Fixed Camera Version: 0   < 7.2.85
 Create a notification for this product.
   PTZOptics 20x Fixed Camera/NDI Fixed Camera Version: 0   < 7.2.94
 Create a notification for this product.
   PTZOptics EPTZ Fixed Camera/NDI Fixed Camera Version: 0   < 8.1.89
 Create a notification for this product.
   PTZOptics HC-EPTZ-NDI Version: 0   < 8.2.14
 Create a notification for this product.
   PTZOptics PT12X-4K-xx-G3 Version: 0   < 0.0.58
 Create a notification for this product.
   PTZOptics PT20X-4K-xx-G3 Version: 0   < 0.0.85
 Create a notification for this product.
   PTZOptics PT20X-USB-xx Version: 0   < 6.2.81
 Create a notification for this product.
   PTZOptics PT30X-4K-xx-G3 Version: 0   < 2.0.64
 Create a notification for this product.
   ValueHD Pan-Tilt-Zoom Cameras Version: *
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-35451",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-09-08T18:08:16.124259Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-09-08T18:08:29.882Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "PT12X-SE-xx-G3",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "9.1.43",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "9.1.43"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "PT12X-LINK-4K-xx",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "0.0.63",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "0.0.63"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "PT20X-SE-xx-G3",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "9.1.32",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "9.1.32"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "PT20X-LINK-4K-xx",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "0.0.89",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "0.0.89"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "PT-STUDIOPRO",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "9.0.41",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "9.0.41"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "PT30X-SE-xx-G3",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "9.1.33",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "9.1.33"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "PT30X-LINK-4K-xx",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "2.0.71",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "2.0.71"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "PT12X-STUDIO-4K-xx-G3",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "8.1.90",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "8.1.90"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "PT20X-STUDIO-4K-xx-G3",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "8.1.90",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "8.1.90"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "PT12X-SDI/NDI-xx",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "6.3.70",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "6.3.70"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "PT12X-USB-xx",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "6.2.88",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "6.2.88"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "PT20X-SDI/NDI-xx",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "6.3.27",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "6.3.27"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "Pan-Tilt-Zoom Cameras",
          "vendor": "SMTAV",
          "versions": [
            {
              "status": "affected",
              "version": "*"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "PT30X-SDI/NDI-xx",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "6.3.43",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "6.3.43"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "Pan-Tilt-Zoom Cameras",
          "vendor": "multiCAM Systems",
          "versions": [
            {
              "status": "affected",
              "version": "*"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "VL Fixed Camera/NDI Fixed Camera",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "7.2.94",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "7.2.94"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "12x Fixed Camera/NDI Fixed Camera",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "7.2.85",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "7.2.85"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "20x Fixed Camera/NDI Fixed Camera",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "7.2.94",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "7.2.94"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "EPTZ Fixed Camera/NDI Fixed Camera",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "8.1.89",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "8.1.89"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "HC-EPTZ-NDI",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "8.2.14",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "8.2.14"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "PT12X-4K-xx-G3",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "0.0.58",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "0.0.58"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "PT20X-4K-xx-G3",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "0.0.85",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "0.0.85"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "PT20X-USB-xx",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "6.2.81",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "6.2.81"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "PT30X-4K-xx-G3",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "2.0.64",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "2.0.64"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "Pan-Tilt-Zoom Cameras",
          "vendor": "ValueHD",
          "versions": [
            {
              "status": "affected",
              "version": "*"
            }
          ]
        }
      ],
      "datePublic": "2025-06-12T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "PTZOptics and possibly other ValueHD-based pan-tilt-zoom cameras use hard-coded, default administrative credentials. The passwords can readily be cracked. Many cameras have SSH or telnet listening on all interfaces. The passwords cannot be changed by the user, nor can the SSH or telnet service be disabled by the user."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        },
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 9.3,
            "baseSeverity": "CRITICAL",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH"
          }
        },
        {
          "other": {
            "content": {
              "id": "CVE-2025-35451",
              "options": [
                {
                  "Exploitation": "none"
                },
                {
                  "Automatable": "yes"
                },
                {
                  "Technical Impact": "total"
                }
              ],
              "role": "CISA Coordinator",
              "timestamp": "2025-09-08T17:57:46.995811Z",
              "version": "2.0.3"
            },
            "type": "ssvc"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-798",
              "description": "CWE-798 Use of Hard-coded Credentials",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-09-08T17:58:14.754Z",
        "orgId": "9119a7d8-5eab-497f-8521-727c672e3725",
        "shortName": "cisa-cg"
      },
      "references": [
        {
          "name": "url",
          "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-10"
        },
        {
          "name": "url",
          "url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-162-10.json"
        },
        {
          "name": "url",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-35451"
        },
        {
          "name": "url",
          "url": "https://www.labs.greynoise.io/grimoire/2024-10-31-sift-0-day-rce/"
        },
        {
          "name": "url",
          "url": "https://www.greynoise.io/blog/greynoise-intelligence-discovers-zero-day-vulnerabilities-in-live-streaming-cameras-with-the-help-of-ai"
        }
      ],
      "title": "Pan-Tilt-Zoom cameras hard-coded default passwords with SSH and telnet enabled"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9119a7d8-5eab-497f-8521-727c672e3725",
    "assignerShortName": "cisa-cg",
    "cveId": "CVE-2025-35451",
    "datePublished": "2025-09-05T17:43:53.108Z",
    "dateReserved": "2025-04-15T20:57:14.282Z",
    "dateUpdated": "2025-09-08T18:08:29.882Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2025-35451\",\"sourceIdentifier\":\"9119a7d8-5eab-497f-8521-727c672e3725\",\"published\":\"2025-09-05T18:15:41.900\",\"lastModified\":\"2025-09-08T16:25:59.157\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"PTZOptics and possibly other ValueHD-based pan-tilt-zoom cameras use hard-coded, default administrative credentials. The passwords can readily be cracked. Many cameras have SSH or telnet listening on all interfaces. The passwords cannot be changed by the user, nor can the SSH or telnet service be disabled by the user.\"}],\"metrics\":{\"cvssMetricV40\":[{\"source\":\"9119a7d8-5eab-497f-8521-727c672e3725\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"4.0\",\"vectorString\":\"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X\",\"baseScore\":9.3,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"NONE\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"vulnConfidentialityImpact\":\"HIGH\",\"vulnIntegrityImpact\":\"HIGH\",\"vulnAvailabilityImpact\":\"HIGH\",\"subConfidentialityImpact\":\"NONE\",\"subIntegrityImpact\":\"NONE\",\"subAvailabilityImpact\":\"NONE\",\"exploitMaturity\":\"NOT_DEFINED\",\"confidentialityRequirement\":\"NOT_DEFINED\",\"integrityRequirement\":\"NOT_DEFINED\",\"availabilityRequirement\":\"NOT_DEFINED\",\"modifiedAttackVector\":\"NOT_DEFINED\",\"modifiedAttackComplexity\":\"NOT_DEFINED\",\"modifiedAttackRequirements\":\"NOT_DEFINED\",\"modifiedPrivilegesRequired\":\"NOT_DEFINED\",\"modifiedUserInteraction\":\"NOT_DEFINED\",\"modifiedVulnConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedVulnIntegrityImpact\":\"NOT_DEFINED\",\"modifiedVulnAvailabilityImpact\":\"NOT_DEFINED\",\"modifiedSubConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedSubIntegrityImpact\":\"NOT_DEFINED\",\"modifiedSubAvailabilityImpact\":\"NOT_DEFINED\",\"Safety\":\"NOT_DEFINED\",\"Automatable\":\"NOT_DEFINED\",\"Recovery\":\"NOT_DEFINED\",\"valueDensity\":\"NOT_DEFINED\",\"vulnerabilityResponseEffort\":\"NOT_DEFINED\",\"providerUrgency\":\"NOT_DEFINED\"}}],\"cvssMetricV31\":[{\"source\":\"9119a7d8-5eab-497f-8521-727c672e3725\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":5.9}]},\"weaknesses\":[{\"source\":\"9119a7d8-5eab-497f-8521-727c672e3725\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-798\"}]}],\"references\":[{\"url\":\"https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-162-10.json\",\"source\":\"9119a7d8-5eab-497f-8521-727c672e3725\"},{\"url\":\"https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-10\",\"source\":\"9119a7d8-5eab-497f-8521-727c672e3725\"},{\"url\":\"https://www.cve.org/CVERecord?id=CVE-2025-35451\",\"source\":\"9119a7d8-5eab-497f-8521-727c672e3725\"},{\"url\":\"https://www.greynoise.io/blog/greynoise-intelligence-discovers-zero-day-vulnerabilities-in-live-streaming-cameras-with-the-help-of-ai\",\"source\":\"9119a7d8-5eab-497f-8521-727c672e3725\"},{\"url\":\"https://www.labs.greynoise.io/grimoire/2024-10-31-sift-0-day-rce/\",\"source\":\"9119a7d8-5eab-497f-8521-727c672e3725\"}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2025-35451\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-09-08T18:08:16.124259Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-09-08T18:08:26.210Z\"}}], \"cna\": {\"title\": \"Pan-Tilt-Zoom cameras hard-coded default passwords with SSH and telnet enabled\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 9.8, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"CRITICAL\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}}, {\"cvssV4_0\": {\"version\": \"4.0\", \"baseScore\": 9.3, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"CRITICAL\", \"vectorString\": \"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"attackRequirements\": \"NONE\", \"privilegesRequired\": \"NONE\", \"subIntegrityImpact\": \"NONE\", \"vulnIntegrityImpact\": \"HIGH\", \"subAvailabilityImpact\": \"NONE\", \"vulnAvailabilityImpact\": \"HIGH\", \"subConfidentialityImpact\": \"NONE\", \"vulnConfidentialityImpact\": \"HIGH\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2025-35451\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-09-08T17:57:46.995811Z\"}}}], \"affected\": [{\"vendor\": \"PTZOptics\", \"product\": \"PT12X-SE-xx-G3\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"9.1.43\", \"versionType\": \"custom\"}, {\"status\": \"unaffected\", \"version\": \"9.1.43\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"PTZOptics\", \"product\": \"PT12X-LINK-4K-xx\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"0.0.63\", \"versionType\": \"custom\"}, {\"status\": \"unaffected\", \"version\": \"0.0.63\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"PTZOptics\", \"product\": \"PT20X-SE-xx-G3\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"9.1.32\", \"versionType\": \"custom\"}, {\"status\": \"unaffected\", \"version\": \"9.1.32\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"PTZOptics\", \"product\": \"PT20X-LINK-4K-xx\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"0.0.89\", \"versionType\": \"custom\"}, {\"status\": \"unaffected\", \"version\": \"0.0.89\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"PTZOptics\", \"product\": \"PT-STUDIOPRO\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"9.0.41\", \"versionType\": \"custom\"}, {\"status\": \"unaffected\", \"version\": \"9.0.41\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"PTZOptics\", \"product\": \"PT30X-SE-xx-G3\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"9.1.33\", \"versionType\": \"custom\"}, {\"status\": \"unaffected\", \"version\": \"9.1.33\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"PTZOptics\", \"product\": \"PT30X-LINK-4K-xx\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"2.0.71\", \"versionType\": \"custom\"}, {\"status\": \"unaffected\", \"version\": \"2.0.71\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"PTZOptics\", \"product\": \"PT12X-STUDIO-4K-xx-G3\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"8.1.90\", \"versionType\": \"custom\"}, {\"status\": \"unaffected\", \"version\": \"8.1.90\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"PTZOptics\", \"product\": \"PT20X-STUDIO-4K-xx-G3\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"8.1.90\", \"versionType\": \"custom\"}, {\"status\": \"unaffected\", \"version\": \"8.1.90\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"PTZOptics\", \"product\": \"PT12X-SDI/NDI-xx\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"6.3.70\", \"versionType\": \"custom\"}, {\"status\": \"unaffected\", \"version\": \"6.3.70\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"PTZOptics\", \"product\": \"PT12X-USB-xx\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"6.2.88\", \"versionType\": \"custom\"}, {\"status\": \"unaffected\", \"version\": \"6.2.88\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"PTZOptics\", \"product\": \"PT20X-SDI/NDI-xx\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"6.3.27\", \"versionType\": \"custom\"}, {\"status\": \"unaffected\", \"version\": \"6.3.27\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"SMTAV\", \"product\": \"Pan-Tilt-Zoom Cameras\", \"versions\": [{\"status\": \"affected\", \"version\": \"*\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"PTZOptics\", \"product\": \"PT30X-SDI/NDI-xx\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"6.3.43\", \"versionType\": \"custom\"}, {\"status\": \"unaffected\", \"version\": \"6.3.43\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"multiCAM Systems\", \"product\": \"Pan-Tilt-Zoom Cameras\", \"versions\": [{\"status\": \"affected\", \"version\": \"*\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"PTZOptics\", \"product\": \"VL Fixed Camera/NDI Fixed Camera\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"7.2.94\", \"versionType\": \"custom\"}, {\"status\": \"unaffected\", \"version\": \"7.2.94\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"PTZOptics\", \"product\": \"12x Fixed Camera/NDI Fixed Camera\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"7.2.85\", \"versionType\": \"custom\"}, {\"status\": \"unaffected\", \"version\": \"7.2.85\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"PTZOptics\", \"product\": \"20x Fixed Camera/NDI Fixed Camera\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"7.2.94\", \"versionType\": \"custom\"}, {\"status\": \"unaffected\", \"version\": \"7.2.94\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"PTZOptics\", \"product\": \"EPTZ Fixed Camera/NDI Fixed Camera\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"8.1.89\", \"versionType\": \"custom\"}, {\"status\": \"unaffected\", \"version\": \"8.1.89\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"PTZOptics\", \"product\": \"HC-EPTZ-NDI\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"8.2.14\", \"versionType\": \"custom\"}, {\"status\": \"unaffected\", \"version\": \"8.2.14\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"PTZOptics\", \"product\": \"PT12X-4K-xx-G3\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"0.0.58\", \"versionType\": \"custom\"}, {\"status\": \"unaffected\", \"version\": \"0.0.58\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"PTZOptics\", \"product\": \"PT20X-4K-xx-G3\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"0.0.85\", \"versionType\": \"custom\"}, {\"status\": \"unaffected\", \"version\": \"0.0.85\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"PTZOptics\", \"product\": \"PT20X-USB-xx\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"6.2.81\", \"versionType\": \"custom\"}, {\"status\": \"unaffected\", \"version\": \"6.2.81\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"PTZOptics\", \"product\": \"PT30X-4K-xx-G3\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"2.0.64\", \"versionType\": \"custom\"}, {\"status\": \"unaffected\", \"version\": \"2.0.64\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"ValueHD\", \"product\": \"Pan-Tilt-Zoom Cameras\", \"versions\": [{\"status\": \"affected\", \"version\": \"*\"}], \"defaultStatus\": \"unknown\"}], \"datePublic\": \"2025-06-12T00:00:00.000Z\", \"references\": [{\"url\": \"https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-10\", \"name\": \"url\"}, {\"url\": \"https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-162-10.json\", \"name\": \"url\"}, {\"url\": \"https://www.cve.org/CVERecord?id=CVE-2025-35451\", \"name\": \"url\"}, {\"url\": \"https://www.labs.greynoise.io/grimoire/2024-10-31-sift-0-day-rce/\", \"name\": \"url\"}, {\"url\": \"https://www.greynoise.io/blog/greynoise-intelligence-discovers-zero-day-vulnerabilities-in-live-streaming-cameras-with-the-help-of-ai\", \"name\": \"url\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"PTZOptics and possibly other ValueHD-based pan-tilt-zoom cameras use hard-coded, default administrative credentials. The passwords can readily be cracked. Many cameras have SSH or telnet listening on all interfaces. The passwords cannot be changed by the user, nor can the SSH or telnet service be disabled by the user.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-798\", \"description\": \"CWE-798 Use of Hard-coded Credentials\"}]}], \"providerMetadata\": {\"orgId\": \"9119a7d8-5eab-497f-8521-727c672e3725\", \"shortName\": \"cisa-cg\", \"dateUpdated\": \"2025-09-08T17:58:14.754Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2025-35451\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-09-08T18:08:29.882Z\", \"dateReserved\": \"2025-04-15T20:57:14.282Z\", \"assignerOrgId\": \"9119a7d8-5eab-497f-8521-727c672e3725\", \"datePublished\": \"2025-09-05T17:43:53.108Z\", \"assignerShortName\": \"cisa-cg\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.