CVE-2026-75969 (GCVE-0-2026-75969)

Vulnerability from cvelistv5 – Published: 2026-09-30 16:27 – Updated: 2026-09-30 20:01
VLAI
Title
PTZOptics Missing Authentication in Firmware Upload
Summary
Missing authentication for critical function vulnerability for all PTZOptics cameras and the Firmware Upgrade Tool - Firmware Update modules. A missing authentication vulnerability in the firmware update mechanism of affected PTZOptics cameras allows an unauthenticated user to install modified firmware on the device without administrator credentials. This vulnerability allows attackers to upload modified firmware to the device without admin credentials. This issue affects: * Move 4K 12X before: 0.0.98 * Move 4K 20X before: 0.1.33 * Move 4K 30X before: 2.1.17 * Link 4K 12X before: 0.0.99 * Link 4K 20X before: 0.1.37 * Link 4K 30X before: 2.1.18 * Move SE 12X before: 9.1.66 * Move SE 20X before: 9.1.44 * Move SE 30X before: 9.1.46 * Studio 4K 12X before: 8.3.32 * Studio 4K 20X before: 8.3.32 * Studio SE 12X before: 8.3.32 * Studio SE 20X before: 8.3.32 * All Generation 2 cameras, including: PT12X-SDI-GY-G2, PT12X-SDI-WH-G2, PT12X-NDI-GY-G2, PT12X-NDI-WH-G2; PT12X-USB-GY-G2, PT12X-USB-WH-G2; PT20X-SDI-GY-G2, PT20X-SDI-WH-G2, PT20X-NDI-GY-G2, PT20X-NDI-WH-G2; PT20X-USB-GY-G2, PT20X-USB-WH-G2; PT30X-SDI-GY-G2, PT30X-SDI-WH-G2, PT30X-NDI-GY-G2, PT30X-NDI-WH-G2; PTVL-ZCAM, PTVL-NDI-ZCAM; PTEPTZ-ZCAM-G2, PTEPTZ-NDI-ZCAM-G2; PT12X-ZCAM, PT12X-NDI-ZCAM; PT20X-ZCAM, PT20X-NDI-ZCAM; Studio Pro - All versions * Upgrade Tool - All versions
Severity
9.1 (Critical)
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/R:U/V:C/RE:L/U:Red
SSVC
Exploitation: none Automatable: yes Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-30 18:30 UTC
CWE
  • CWE-306 - Missing authentication for critical function
Assigner
References
Impacted products
Vendor Product Version CPE status
PTZOptics Move 4K 12X Affected: 0 , < 0.0.98 (custom)
guessed Create a notification for this product.
PTZOptics Move 4K 20X Affected: 0 , < 0.1.33 (custom)
guessed Create a notification for this product.
PTZOptics Move 4K 30X Affected: 0 , < 2.1.17 (custom)
guessed Create a notification for this product.
PTZOptics Link 4K 12X Affected: 0 , < 0.0.99 (custom)
guessed Create a notification for this product.
PTZOptics Link 4K 20X Affected: 0 , < 0.1.37 (custom)
guessed Create a notification for this product.
PTZOptics Link 4K 30X Affected: 0 , < 2.1.18 (custom)
guessed Create a notification for this product.
PTZOptics Move SE 12X Affected: 0 , < 9.1.66 (custom)
guessed Create a notification for this product.
PTZOptics Move SE 20X Affected: 0 , < 9.1.44 (custom)
guessed Create a notification for this product.
PTZOptics Move SE 30X Affected: 0 , < 9.1.46 (custom)
guessed Create a notification for this product.
PTZOptics Studio 4K 12X Affected: 0 , < 8.3.32 (custom)
guessed Create a notification for this product.
PTZOptics Studio 4K 20X Affected: 0 , < 8.3.32 (custom)
guessed Create a notification for this product.
PTZOptics Studio SE 12X Affected: 0 , < 8.3.32 (custom)
guessed Create a notification for this product.
PTZOptics Studio SE 20X Affected: 0 , < 8.3.32 (custom)
guessed Create a notification for this product.
PTZOptics PT12X-SDI-GY-G2, PT12X-SDI-WH-G2, PT12X-NDI-GY-G2, PT12X-NDI-WH-G2 Affected: 0 (custom)
guessed Create a notification for this product.
PTZOptics PT12X-USB-GY-G2, PT12X-USB-WH-G2 Affected: 0 (custom)
guessed Create a notification for this product.
PTZOptics PT20X-SDI-GY-G2, PT20X-SDI-WH-G2, PT20X-NDI-GY-G2, PT20X-NDI-WH-G2 Affected: 0 (custom)
guessed Create a notification for this product.
PTZOptics PT20X-USB-GY-G2, PT20X-USB-WH-G2 Affected: 0 (custom)
guessed Create a notification for this product.
PTZOptics PT30X-SDI-GY-G2, PT30X-SDI-WH-G2, PT30X-NDI-GY-G2, PT30X-NDI-WH-G2 Affected: 0 (custom)
guessed Create a notification for this product.
PTZOptics PTVL-ZCAM, PTVL-NDI-ZCAM Affected: 0 (custom)
guessed Create a notification for this product.
PTZOptics PTEPTZ-ZCAM-G2, PTEPTZ-NDI-ZCAM-G2 Affected: 0 (custom)
guessed Create a notification for this product.
PTZOptics PT12X-ZCAM, PT12X-NDI-ZCAM Affected: 0 (custom)
guessed Create a notification for this product.
PTZOptics PT20X-ZCAM, PT20X-NDI-ZCAM Affected: 0 (custom)
guessed Create a notification for this product.
PTZOptics Studio Pro Affected: 0
guessed Create a notification for this product.
PTZOptics Upgrade Tool Affected: 0 (custom)
guessed Create a notification for this product.
Credits
Haverford Systems Inc. & PTZOptics would like to thank Jaroslav Svoboda of CESNET for responsibly reporting this vulnerability.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-75969",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-30T18:30:11.739848Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-30T20:01:02.432Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "modules": [
            "Firmware Update"
          ],
          "product": "Move 4K 12X",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "0.0.98",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "modules": [
            "Firmware Update"
          ],
          "product": "Move 4K 20X",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "0.1.33",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "modules": [
            "Firmware Update"
          ],
          "product": "Move 4K 30X",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "2.1.17",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "modules": [
            "Firmware Update"
          ],
          "product": "Link 4K 12X",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "0.0.99",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "modules": [
            "Firmware Update"
          ],
          "product": "Link 4K 20X",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "0.1.37",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "modules": [
            "Firmware Update"
          ],
          "product": "Link 4K 30X",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "2.1.18",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "modules": [
            "Firmware Update"
          ],
          "product": "Move SE 12X",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "9.1.66",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "modules": [
            "Firmware Update"
          ],
          "product": "Move SE 20X",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "9.1.44",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "modules": [
            "Firmware Update"
          ],
          "product": "Move SE 30X",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "9.1.46",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "modules": [
            "Firmware Update"
          ],
          "product": "Studio 4K 12X",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "8.3.32",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "modules": [
            "Firmware Update"
          ],
          "product": "Studio 4K 20X",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "8.3.32",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "modules": [
            "Firmware Update"
          ],
          "product": "Studio SE 12X",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "8.3.32",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "modules": [
            "Firmware Update"
          ],
          "product": "Studio SE 20X",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "8.3.32",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "modules": [
            "Firmware Update"
          ],
          "product": "PT12X-SDI-GY-G2, PT12X-SDI-WH-G2, PT12X-NDI-GY-G2, PT12X-NDI-WH-G2",
          "vendor": "PTZOptics",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "modules": [
            "Firmware Update"
          ],
          "product": "PT12X-USB-GY-G2, PT12X-USB-WH-G2",
          "vendor": "PTZOptics",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "modules": [
            "Firmware Update"
          ],
          "product": "PT20X-SDI-GY-G2, PT20X-SDI-WH-G2, PT20X-NDI-GY-G2, PT20X-NDI-WH-G2",
          "vendor": "PTZOptics",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "modules": [
            "Firmware Update"
          ],
          "product": "PT20X-USB-GY-G2, PT20X-USB-WH-G2",
          "vendor": "PTZOptics",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "modules": [
            "Firmware Update"
          ],
          "product": "PT30X-SDI-GY-G2, PT30X-SDI-WH-G2, PT30X-NDI-GY-G2, PT30X-NDI-WH-G2",
          "vendor": "PTZOptics",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "modules": [
            "Firmware Update"
          ],
          "product": "PTVL-ZCAM, PTVL-NDI-ZCAM",
          "vendor": "PTZOptics",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "modules": [
            "Firmware Update"
          ],
          "product": "PTEPTZ-ZCAM-G2, PTEPTZ-NDI-ZCAM-G2",
          "vendor": "PTZOptics",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "modules": [
            "Firmware Update"
          ],
          "product": "PT12X-ZCAM, PT12X-NDI-ZCAM",
          "vendor": "PTZOptics",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "modules": [
            "Firmware Update"
          ],
          "product": "PT20X-ZCAM, PT20X-NDI-ZCAM",
          "vendor": "PTZOptics",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Studio Pro",
          "vendor": "PTZOptics",
          "versions": [
            {
              "status": "affected",
              "version": "0"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "modules": [
            "Firmware Update"
          ],
          "product": "Upgrade Tool",
          "vendor": "PTZOptics",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Haverford Systems Inc. \u0026 PTZOptics would like to thank Jaroslav Svoboda of CESNET for responsibly reporting this vulnerability."
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eMissing authentication for critical function vulnerability for all PTZOptics cameras and the Firmware Upgrade Tool - Firmware Update modules. A missing authentication vulnerability in the firmware update mechanism of affected PTZOptics cameras allows an unauthenticated user to install modified firmware on the device without administrator credentials.\n\u003cbr\u003e\n\u003cbr\u003eThis vulnerability allows attackers to upload modified firmware to the device without admin credentials. This issue affects:\u003c/p\u003e\u003cp\u003e\u003c/p\u003e\u003cul\u003e\u003cli\u003eMove 4K 12X before: 0.0.98\u003c/li\u003e\u003cli\u003eMove 4K 20X before: 0.1.33\u003c/li\u003e\u003cli\u003eMove 4K 30X before: 2.1.17\u003c/li\u003e\u003cli\u003eLink 4K 12X before: 0.0.99\u003c/li\u003e\u003cli\u003eLink 4K 20X before: 0.1.37\u003c/li\u003e\u003cli\u003eLink 4K 30X before: 2.1.18\u003c/li\u003e\u003cli\u003eMove SE 12X before: 9.1.66\u003c/li\u003e\u003cli\u003eMove SE 20X before: 9.1.44\u003c/li\u003e\u003cli\u003eMove SE 30X before: 9.1.46\u003c/li\u003e\u003cli\u003eStudio 4K 12X before: 8.3.32\u003c/li\u003e\u003cli\u003eStudio 4K 20X before: 8.3.32\u003c/li\u003e\u003cli\u003eStudio SE 12X before: 8.3.32\u003c/li\u003e\u003cli\u003eStudio SE 20X before: 8.3.32\u003c/li\u003e\u003cli\u003eAll Generation 2 cameras, including: PT12X-SDI-GY-G2, PT12X-SDI-WH-G2, PT12X-NDI-GY-G2, PT12X-NDI-WH-G2; PT12X-USB-GY-G2, PT12X-USB-WH-G2; PT20X-SDI-GY-G2, PT20X-SDI-WH-G2, PT20X-NDI-GY-G2, PT20X-NDI-WH-G2; PT20X-USB-GY-G2, PT20X-USB-WH-G2; PT30X-SDI-GY-G2, PT30X-SDI-WH-G2, PT30X-NDI-GY-G2, PT30X-NDI-WH-G2; PTVL-ZCAM, PTVL-NDI-ZCAM; PTEPTZ-ZCAM-G2, PTEPTZ-NDI-ZCAM-G2; PT12X-ZCAM, PT12X-NDI-ZCAM; PT20X-ZCAM, PT20X-NDI-ZCAM; Studio Pro - All versions\u003c/li\u003e\u003cli\u003eUpgrade Tool - All versions\u0026nbsp;\u003cbr\u003e\u003c/li\u003e\u003c/ul\u003e\u003cp\u003e\u003c/p\u003e"
            }
          ],
          "value": "Missing authentication for critical function vulnerability for all PTZOptics cameras and the Firmware Upgrade Tool - Firmware Update modules. A missing authentication vulnerability in the firmware update mechanism of affected PTZOptics cameras allows an unauthenticated user to install modified firmware on the device without administrator credentials.\n\n\n\nThis vulnerability allows attackers to upload modified firmware to the device without admin credentials. This issue affects:\n\n\n\n\n\n  *  Move 4K 12X before: 0.0.98\n  *  Move 4K 20X before: 0.1.33\n  *  Move 4K 30X before: 2.1.17\n  *  Link 4K 12X before: 0.0.99\n  *  Link 4K 20X before: 0.1.37\n  *  Link 4K 30X before: 2.1.18\n  *  Move SE 12X before: 9.1.66\n  *  Move SE 20X before: 9.1.44\n  *  Move SE 30X before: 9.1.46\n  *  Studio 4K 12X before: 8.3.32\n  *  Studio 4K 20X before: 8.3.32\n  *  Studio SE 12X before: 8.3.32\n  *  Studio SE 20X before: 8.3.32\n  *  All Generation 2 cameras, including: PT12X-SDI-GY-G2, PT12X-SDI-WH-G2, PT12X-NDI-GY-G2, PT12X-NDI-WH-G2; PT12X-USB-GY-G2, PT12X-USB-WH-G2; PT20X-SDI-GY-G2, PT20X-SDI-WH-G2, PT20X-NDI-GY-G2, PT20X-NDI-WH-G2; PT20X-USB-GY-G2, PT20X-USB-WH-G2; PT30X-SDI-GY-G2, PT30X-SDI-WH-G2, PT30X-NDI-GY-G2, PT30X-NDI-WH-G2; PTVL-ZCAM, PTVL-NDI-ZCAM; PTEPTZ-ZCAM-G2, PTEPTZ-NDI-ZCAM-G2; PT12X-ZCAM, PT12X-NDI-ZCAM; PT20X-ZCAM, PT20X-NDI-ZCAM; Studio Pro - All versions\n  *  Upgrade Tool - All versions"
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-638",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-638 Altered Component Firmware"
            }
          ]
        },
        {
          "capecId": "CAPEC-669",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-669 Alteration of a Software Update"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "NONE",
            "providerUrgency": "RED",
            "subAvailabilityImpact": "HIGH",
            "subConfidentialityImpact": "HIGH",
            "subIntegrityImpact": "HIGH",
            "userInteraction": "NONE",
            "valueDensity": "CONCENTRATED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/R:U/V:C/RE:L/U:Red",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "LOW"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-306",
              "description": "CWE-306 Missing authentication for critical function",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-30T16:27:51.490Z",
        "orgId": "16cac6a8-cc1e-4741-89aa-6b97e2437706",
        "shortName": "hsi"
      },
      "references": [
        {
          "url": "https://psirt.havsys.com/"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003e\u003cb\u003eProduct\u003c/b\u003e\u003c/td\u003e\u003ctd\u003e\u003cb\u003eRemediation\u003c/b\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eMove 4K 12X\u003c/td\u003e\u003ctd\u003eUpdate to Firmware 0.0.98.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eMove 4K 20X\u003c/td\u003e\u003ctd\u003eUpdate to Firmware 0.1.33.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eMove 4K 30X\u003c/td\u003e\u003ctd\u003eUpdate to Firmware 2.1.17.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eLink 4K 12X\u003c/td\u003e\u003ctd\u003eUpdate to Firmware 0.0.99.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eLink 4K 20X\u003c/td\u003e\u003ctd\u003eUpdate to Firmware 0.1.37.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eLink 4K 30X\u003c/td\u003e\u003ctd\u003eUpdate to Firmware 2.1.18.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eMove SE 12X\u0026nbsp;\u003c/td\u003e\u003ctd\u003eUpdate to Firmware 9.1.66.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eMove SE 20X\u0026nbsp;\u003c/td\u003e\u003ctd\u003eUpdate to Firmware 9.1.44.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eMove SE 30X\u0026nbsp;\u003c/td\u003e\u003ctd\u003eUpdate to Firmware 9.1.46.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eStudio 4K 12X\u003c/td\u003e\u003ctd\u003eUpdate to Firmware 8.3.32\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eStudio 4K 20X\u003c/td\u003e\u003ctd\u003eUpdate to Firmware 8.3.32.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eStudio SE 12X\u003c/td\u003e\u003ctd\u003eUpdate to Firmware 8.3.32.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eStudio SE 20X\u003c/td\u003e\u003ctd\u003eUpdate to Firmware 8.3.32\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003cp\u003e\u003cbr\u003e\u003c/p\u003e"
            }
          ],
          "value": "ProductRemediationMove 4K 12XUpdate to Firmware 0.0.98.Move 4K 20XUpdate to Firmware 0.1.33.Move 4K 30XUpdate to Firmware 2.1.17.Link 4K 12XUpdate to Firmware 0.0.99.Link 4K 20XUpdate to Firmware 0.1.37.Link 4K 30XUpdate to Firmware 2.1.18.Move SE 12X\u00a0Update to Firmware 9.1.66.Move SE 20X\u00a0Update to Firmware 9.1.44.Move SE 30X\u00a0Update to Firmware 9.1.46.Studio 4K 12XUpdate to Firmware 8.3.32Studio 4K 20XUpdate to Firmware 8.3.32.Studio SE 12XUpdate to Firmware 8.3.32.Studio SE 20XUpdate to Firmware 8.3.32"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "PTZOptics Missing Authentication in Firmware Upload",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cul\u003e\u003cli\u003eDisable network services until the firmware can be updated.\u003c/li\u003e\u003cli\u003eRestrict access to the camera to a trusted management VLAN.\u003c/li\u003e\u003c/ul\u003e"
            }
          ],
          "value": "*  Disable network services until the firmware can be updated.\n  *  Restrict access to the camera to a trusted management VLAN."
        }
      ],
      "x_generator": {
        "engine": "Vulnogram 1.0.4"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "16cac6a8-cc1e-4741-89aa-6b97e2437706",
    "assignerShortName": "hsi",
    "cveId": "CVE-2026-75969",
    "datePublished": "2026-09-30T16:27:51.490Z",
    "dateReserved": "2026-08-18T17:26:08.229Z",
    "dateUpdated": "2026-09-30T20:01:02.432Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-75969",
      "date": "2026-10-01",
      "epss": "0.00561",
      "percentile": "0.44611"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "unaffected",
                "modules": [
                  "Firmware Update"
                ],
                "product": "Move 4K 12X",
                "vendor": "PTZOptics",
                "versions": [
                  {
                    "lessThan": "0.0.98",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "modules": [
                  "Firmware Update"
                ],
                "product": "Move 4K 20X",
                "vendor": "PTZOptics",
                "versions": [
                  {
                    "lessThan": "0.1.33",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "modules": [
                  "Firmware Update"
                ],
                "product": "Move 4K 30X",
                "vendor": "PTZOptics",
                "versions": [
                  {
                    "lessThan": "2.1.17",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "modules": [
                  "Firmware Update"
                ],
                "product": "Link 4K 12X",
                "vendor": "PTZOptics",
                "versions": [
                  {
                    "lessThan": "0.0.99",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "modules": [
                  "Firmware Update"
                ],
                "product": "Link 4K 20X",
                "vendor": "PTZOptics",
                "versions": [
                  {
                    "lessThan": "0.1.37",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "modules": [
                  "Firmware Update"
                ],
                "product": "Link 4K 30X",
                "vendor": "PTZOptics",
                "versions": [
                  {
                    "lessThan": "2.1.18",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "modules": [
                  "Firmware Update"
                ],
                "product": "Move SE 12X",
                "vendor": "PTZOptics",
                "versions": [
                  {
                    "lessThan": "9.1.66",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "modules": [
                  "Firmware Update"
                ],
                "product": "Move SE 20X",
                "vendor": "PTZOptics",
                "versions": [
                  {
                    "lessThan": "9.1.44",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "modules": [
                  "Firmware Update"
                ],
                "product": "Move SE 30X",
                "vendor": "PTZOptics",
                "versions": [
                  {
                    "lessThan": "9.1.46",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "modules": [
                  "Firmware Update"
                ],
                "product": "Studio 4K 12X",
                "vendor": "PTZOptics",
                "versions": [
                  {
                    "lessThan": "8.3.32",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "modules": [
                  "Firmware Update"
                ],
                "product": "Studio 4K 20X",
                "vendor": "PTZOptics",
                "versions": [
                  {
                    "lessThan": "8.3.32",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "modules": [
                  "Firmware Update"
                ],
                "product": "Studio SE 12X",
                "vendor": "PTZOptics",
                "versions": [
                  {
                    "lessThan": "8.3.32",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "modules": [
                  "Firmware Update"
                ],
                "product": "Studio SE 20X",
                "vendor": "PTZOptics",
                "versions": [
                  {
                    "lessThan": "8.3.32",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "affected",
                "modules": [
                  "Firmware Update"
                ],
                "product": "PT12X-SDI-GY-G2, PT12X-SDI-WH-G2, PT12X-NDI-GY-G2, PT12X-NDI-WH-G2",
                "vendor": "PTZOptics",
                "versions": [
                  {
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "affected",
                "modules": [
                  "Firmware Update"
                ],
                "product": "PT12X-USB-GY-G2, PT12X-USB-WH-G2",
                "vendor": "PTZOptics",
                "versions": [
                  {
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "affected",
                "modules": [
                  "Firmware Update"
                ],
                "product": "PT20X-SDI-GY-G2, PT20X-SDI-WH-G2, PT20X-NDI-GY-G2, PT20X-NDI-WH-G2",
                "vendor": "PTZOptics",
                "versions": [
                  {
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "affected",
                "modules": [
                  "Firmware Update"
                ],
                "product": "PT20X-USB-GY-G2, PT20X-USB-WH-G2",
                "vendor": "PTZOptics",
                "versions": [
                  {
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "affected",
                "modules": [
                  "Firmware Update"
                ],
                "product": "PT30X-SDI-GY-G2, PT30X-SDI-WH-G2, PT30X-NDI-GY-G2, PT30X-NDI-WH-G2",
                "vendor": "PTZOptics",
                "versions": [
                  {
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "affected",
                "modules": [
                  "Firmware Update"
                ],
                "product": "PTVL-ZCAM, PTVL-NDI-ZCAM",
                "vendor": "PTZOptics",
                "versions": [
                  {
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "affected",
                "modules": [
                  "Firmware Update"
                ],
                "product": "PTEPTZ-ZCAM-G2, PTEPTZ-NDI-ZCAM-G2",
                "vendor": "PTZOptics",
                "versions": [
                  {
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "affected",
                "modules": [
                  "Firmware Update"
                ],
                "product": "PT12X-ZCAM, PT12X-NDI-ZCAM",
                "vendor": "PTZOptics",
                "versions": [
                  {
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "affected",
                "modules": [
                  "Firmware Update"
                ],
                "product": "PT20X-ZCAM, PT20X-NDI-ZCAM",
                "vendor": "PTZOptics",
                "versions": [
                  {
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "affected",
                "product": "Studio Pro",
                "vendor": "PTZOptics",
                "versions": [
                  {
                    "status": "affected",
                    "version": "0"
                  }
                ]
              },
              {
                "defaultStatus": "affected",
                "modules": [
                  "Firmware Update"
                ],
                "product": "Upgrade Tool",
                "vendor": "PTZOptics",
                "versions": [
                  {
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              }
            ],
            "source": "16cac6a8-cc1e-4741-89aa-6b97e2437706"
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "Missing authentication for critical function vulnerability for all PTZOptics cameras and the Firmware Upgrade Tool - Firmware Update modules. A missing authentication vulnerability in the firmware update mechanism of affected PTZOptics cameras allows an unauthenticated user to install modified firmware on the device without administrator credentials.\n\n\n\nThis vulnerability allows attackers to upload modified firmware to the device without admin credentials. This issue affects:\n\n\n\n\n\n  *  Move 4K 12X before: 0.0.98\n  *  Move 4K 20X before: 0.1.33\n  *  Move 4K 30X before: 2.1.17\n  *  Link 4K 12X before: 0.0.99\n  *  Link 4K 20X before: 0.1.37\n  *  Link 4K 30X before: 2.1.18\n  *  Move SE 12X before: 9.1.66\n  *  Move SE 20X before: 9.1.44\n  *  Move SE 30X before: 9.1.46\n  *  Studio 4K 12X before: 8.3.32\n  *  Studio 4K 20X before: 8.3.32\n  *  Studio SE 12X before: 8.3.32\n  *  Studio SE 20X before: 8.3.32\n  *  All Generation 2 cameras, including: PT12X-SDI-GY-G2, PT12X-SDI-WH-G2, PT12X-NDI-GY-G2, PT12X-NDI-WH-G2; PT12X-USB-GY-G2, PT12X-USB-WH-G2; PT20X-SDI-GY-G2, PT20X-SDI-WH-G2, PT20X-NDI-GY-G2, PT20X-NDI-WH-G2; PT20X-USB-GY-G2, PT20X-USB-WH-G2; PT30X-SDI-GY-G2, PT30X-SDI-WH-G2, PT30X-NDI-GY-G2, PT30X-NDI-WH-G2; PTVL-ZCAM, PTVL-NDI-ZCAM; PTEPTZ-ZCAM-G2, PTEPTZ-NDI-ZCAM-G2; PT12X-ZCAM, PT12X-NDI-ZCAM; PT20X-ZCAM, PT20X-NDI-ZCAM; Studio Pro - All versions\n  *  Upgrade Tool - All versions"
          }
        ],
        "id": "CVE-2026-75969",
        "lastModified": "2026-09-30T21:17:13.377",
        "metrics": {
          "cvssMetricV40": [
            {
              "cvssData": {
                "Automatable": "NOT_DEFINED",
                "Recovery": "USER",
                "Safety": "NOT_DEFINED",
                "attackComplexity": "LOW",
                "attackRequirements": "NONE",
                "attackVector": "NETWORK",
                "availabilityRequirement": "NOT_DEFINED",
                "baseScore": 9.1,
                "baseSeverity": "CRITICAL",
                "confidentialityRequirement": "NOT_DEFINED",
                "exploitMaturity": "UNREPORTED",
                "integrityRequirement": "NOT_DEFINED",
                "modifiedAttackComplexity": "NOT_DEFINED",
                "modifiedAttackRequirements": "NOT_DEFINED",
                "modifiedAttackVector": "NOT_DEFINED",
                "modifiedPrivilegesRequired": "NOT_DEFINED",
                "modifiedSubAvailabilityImpact": "NOT_DEFINED",
                "modifiedSubConfidentialityImpact": "NOT_DEFINED",
                "modifiedSubIntegrityImpact": "NOT_DEFINED",
                "modifiedUserInteraction": "NOT_DEFINED",
                "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
                "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
                "modifiedVulnIntegrityImpact": "NOT_DEFINED",
                "privilegesRequired": "NONE",
                "providerUrgency": "RED",
                "subAvailabilityImpact": "HIGH",
                "subConfidentialityImpact": "HIGH",
                "subIntegrityImpact": "HIGH",
                "userInteraction": "NONE",
                "valueDensity": "CONCENTRATED",
                "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:U/V:C/RE:L/U:Red",
                "version": "4.0",
                "vulnAvailabilityImpact": "HIGH",
                "vulnConfidentialityImpact": "HIGH",
                "vulnIntegrityImpact": "HIGH",
                "vulnerabilityResponseEffort": "LOW"
              },
              "source": "16cac6a8-cc1e-4741-89aa-6b97e2437706",
              "type": "Secondary"
            }
          ],
          "ssvcV203": [
            {
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "ssvcData": {
                "id": "CVE-2026-75969",
                "options": [
                  {
                    "exploitation": "none"
                  },
                  {
                    "automatable": "yes"
                  },
                  {
                    "technicalImpact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-30T18:30:11.739848Z",
                "version": "2.0.3"
              }
            }
          ]
        },
        "published": "2026-09-30T17:16:49.583",
        "references": [
          {
            "source": "16cac6a8-cc1e-4741-89aa-6b97e2437706",
            "url": "https://psirt.havsys.com/"
          }
        ],
        "sourceIdentifier": "16cac6a8-cc1e-4741-89aa-6b97e2437706",
        "vulnStatus": "Deferred",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-306"
              }
            ],
            "source": "16cac6a8-cc1e-4741-89aa-6b97e2437706",
            "type": "Secondary"
          }
        ]
      }
    },
    "vulnrichment": {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-75969",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "yes"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-09-30T18:30:11.739848Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-09-30T18:30:20.391Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "modules": [
                "Firmware Update"
              ],
              "product": "Move 4K 12X",
              "vendor": "PTZOptics",
              "versions": [
                {
                  "lessThan": "0.0.98",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "modules": [
                "Firmware Update"
              ],
              "product": "Move 4K 20X",
              "vendor": "PTZOptics",
              "versions": [
                {
                  "lessThan": "0.1.33",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "modules": [
                "Firmware Update"
              ],
              "product": "Move 4K 30X",
              "vendor": "PTZOptics",
              "versions": [
                {
                  "lessThan": "2.1.17",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "modules": [
                "Firmware Update"
              ],
              "product": "Link 4K 12X",
              "vendor": "PTZOptics",
              "versions": [
                {
                  "lessThan": "0.0.99",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "modules": [
                "Firmware Update"
              ],
              "product": "Link 4K 20X",
              "vendor": "PTZOptics",
              "versions": [
                {
                  "lessThan": "0.1.37",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "modules": [
                "Firmware Update"
              ],
              "product": "Link 4K 30X",
              "vendor": "PTZOptics",
              "versions": [
                {
                  "lessThan": "2.1.18",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "modules": [
                "Firmware Update"
              ],
              "product": "Move SE 12X",
              "vendor": "PTZOptics",
              "versions": [
                {
                  "lessThan": "9.1.66",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "modules": [
                "Firmware Update"
              ],
              "product": "Move SE 20X",
              "vendor": "PTZOptics",
              "versions": [
                {
                  "lessThan": "9.1.44",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "modules": [
                "Firmware Update"
              ],
              "product": "Move SE 30X",
              "vendor": "PTZOptics",
              "versions": [
                {
                  "lessThan": "9.1.46",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "modules": [
                "Firmware Update"
              ],
              "product": "Studio 4K 12X",
              "vendor": "PTZOptics",
              "versions": [
                {
                  "lessThan": "8.3.32",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "modules": [
                "Firmware Update"
              ],
              "product": "Studio 4K 20X",
              "vendor": "PTZOptics",
              "versions": [
                {
                  "lessThan": "8.3.32",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "modules": [
                "Firmware Update"
              ],
              "product": "Studio SE 12X",
              "vendor": "PTZOptics",
              "versions": [
                {
                  "lessThan": "8.3.32",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "modules": [
                "Firmware Update"
              ],
              "product": "Studio SE 20X",
              "vendor": "PTZOptics",
              "versions": [
                {
                  "lessThan": "8.3.32",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "affected",
              "modules": [
                "Firmware Update"
              ],
              "product": "PT12X-SDI-GY-G2, PT12X-SDI-WH-G2, PT12X-NDI-GY-G2, PT12X-NDI-WH-G2",
              "vendor": "PTZOptics",
              "versions": [
                {
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "affected",
              "modules": [
                "Firmware Update"
              ],
              "product": "PT12X-USB-GY-G2, PT12X-USB-WH-G2",
              "vendor": "PTZOptics",
              "versions": [
                {
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "affected",
              "modules": [
                "Firmware Update"
              ],
              "product": "PT20X-SDI-GY-G2, PT20X-SDI-WH-G2, PT20X-NDI-GY-G2, PT20X-NDI-WH-G2",
              "vendor": "PTZOptics",
              "versions": [
                {
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "affected",
              "modules": [
                "Firmware Update"
              ],
              "product": "PT20X-USB-GY-G2, PT20X-USB-WH-G2",
              "vendor": "PTZOptics",
              "versions": [
                {
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "affected",
              "modules": [
                "Firmware Update"
              ],
              "product": "PT30X-SDI-GY-G2, PT30X-SDI-WH-G2, PT30X-NDI-GY-G2, PT30X-NDI-WH-G2",
              "vendor": "PTZOptics",
              "versions": [
                {
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "affected",
              "modules": [
                "Firmware Update"
              ],
              "product": "PTVL-ZCAM, PTVL-NDI-ZCAM",
              "vendor": "PTZOptics",
              "versions": [
                {
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "affected",
              "modules": [
                "Firmware Update"
              ],
              "product": "PTEPTZ-ZCAM-G2, PTEPTZ-NDI-ZCAM-G2",
              "vendor": "PTZOptics",
              "versions": [
                {
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "affected",
              "modules": [
                "Firmware Update"
              ],
              "product": "PT12X-ZCAM, PT12X-NDI-ZCAM",
              "vendor": "PTZOptics",
              "versions": [
                {
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "affected",
              "modules": [
                "Firmware Update"
              ],
              "product": "PT20X-ZCAM, PT20X-NDI-ZCAM",
              "vendor": "PTZOptics",
              "versions": [
                {
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "affected",
              "product": "Studio Pro",
              "vendor": "PTZOptics",
              "versions": [
                {
                  "status": "affected",
                  "version": "0"
                }
              ]
            },
            {
              "defaultStatus": "affected",
              "modules": [
                "Firmware Update"
              ],
              "product": "Upgrade Tool",
              "vendor": "PTZOptics",
              "versions": [
                {
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "finder",
              "value": "Haverford Systems Inc. \u0026 PTZOptics would like to thank Jaroslav Svoboda of CESNET for responsibly reporting this vulnerability."
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\u003cp\u003eMissing authentication for critical function vulnerability for all PTZOptics cameras and the Firmware Upgrade Tool - Firmware Update modules. A missing authentication vulnerability in the firmware update mechanism of affected PTZOptics cameras allows an unauthenticated user to install modified firmware on the device without administrator credentials.\n\u003cbr\u003e\n\u003cbr\u003eThis vulnerability allows attackers to upload modified firmware to the device without admin credentials. This issue affects:\u003c/p\u003e\u003cp\u003e\u003c/p\u003e\u003cul\u003e\u003cli\u003eMove 4K 12X before: 0.0.98\u003c/li\u003e\u003cli\u003eMove 4K 20X before: 0.1.33\u003c/li\u003e\u003cli\u003eMove 4K 30X before: 2.1.17\u003c/li\u003e\u003cli\u003eLink 4K 12X before: 0.0.99\u003c/li\u003e\u003cli\u003eLink 4K 20X before: 0.1.37\u003c/li\u003e\u003cli\u003eLink 4K 30X before: 2.1.18\u003c/li\u003e\u003cli\u003eMove SE 12X before: 9.1.66\u003c/li\u003e\u003cli\u003eMove SE 20X before: 9.1.44\u003c/li\u003e\u003cli\u003eMove SE 30X before: 9.1.46\u003c/li\u003e\u003cli\u003eStudio 4K 12X before: 8.3.32\u003c/li\u003e\u003cli\u003eStudio 4K 20X before: 8.3.32\u003c/li\u003e\u003cli\u003eStudio SE 12X before: 8.3.32\u003c/li\u003e\u003cli\u003eStudio SE 20X before: 8.3.32\u003c/li\u003e\u003cli\u003eAll Generation 2 cameras, including: PT12X-SDI-GY-G2, PT12X-SDI-WH-G2, PT12X-NDI-GY-G2, PT12X-NDI-WH-G2; PT12X-USB-GY-G2, PT12X-USB-WH-G2; PT20X-SDI-GY-G2, PT20X-SDI-WH-G2, PT20X-NDI-GY-G2, PT20X-NDI-WH-G2; PT20X-USB-GY-G2, PT20X-USB-WH-G2; PT30X-SDI-GY-G2, PT30X-SDI-WH-G2, PT30X-NDI-GY-G2, PT30X-NDI-WH-G2; PTVL-ZCAM, PTVL-NDI-ZCAM; PTEPTZ-ZCAM-G2, PTEPTZ-NDI-ZCAM-G2; PT12X-ZCAM, PT12X-NDI-ZCAM; PT20X-ZCAM, PT20X-NDI-ZCAM; Studio Pro - All versions\u003c/li\u003e\u003cli\u003eUpgrade Tool - All versions\u0026nbsp;\u003cbr\u003e\u003c/li\u003e\u003c/ul\u003e\u003cp\u003e\u003c/p\u003e"
                }
              ],
              "value": "Missing authentication for critical function vulnerability for all PTZOptics cameras and the Firmware Upgrade Tool - Firmware Update modules. A missing authentication vulnerability in the firmware update mechanism of affected PTZOptics cameras allows an unauthenticated user to install modified firmware on the device without administrator credentials.\n\n\n\nThis vulnerability allows attackers to upload modified firmware to the device without admin credentials. This issue affects:\n\n\n\n\n\n  *  Move 4K 12X before: 0.0.98\n  *  Move 4K 20X before: 0.1.33\n  *  Move 4K 30X before: 2.1.17\n  *  Link 4K 12X before: 0.0.99\n  *  Link 4K 20X before: 0.1.37\n  *  Link 4K 30X before: 2.1.18\n  *  Move SE 12X before: 9.1.66\n  *  Move SE 20X before: 9.1.44\n  *  Move SE 30X before: 9.1.46\n  *  Studio 4K 12X before: 8.3.32\n  *  Studio 4K 20X before: 8.3.32\n  *  Studio SE 12X before: 8.3.32\n  *  Studio SE 20X before: 8.3.32\n  *  All Generation 2 cameras, including: PT12X-SDI-GY-G2, PT12X-SDI-WH-G2, PT12X-NDI-GY-G2, PT12X-NDI-WH-G2; PT12X-USB-GY-G2, PT12X-USB-WH-G2; PT20X-SDI-GY-G2, PT20X-SDI-WH-G2, PT20X-NDI-GY-G2, PT20X-NDI-WH-G2; PT20X-USB-GY-G2, PT20X-USB-WH-G2; PT30X-SDI-GY-G2, PT30X-SDI-WH-G2, PT30X-NDI-GY-G2, PT30X-NDI-WH-G2; PTVL-ZCAM, PTVL-NDI-ZCAM; PTEPTZ-ZCAM-G2, PTEPTZ-NDI-ZCAM-G2; PT12X-ZCAM, PT12X-NDI-ZCAM; PT20X-ZCAM, PT20X-NDI-ZCAM; Studio Pro - All versions\n  *  Upgrade Tool - All versions"
            }
          ],
          "impacts": [
            {
              "capecId": "CAPEC-638",
              "descriptions": [
                {
                  "lang": "en",
                  "value": "CAPEC-638 Altered Component Firmware"
                }
              ]
            },
            {
              "capecId": "CAPEC-669",
              "descriptions": [
                {
                  "lang": "en",
                  "value": "CAPEC-669 Alteration of a Software Update"
                }
              ]
            }
          ],
          "metrics": [
            {
              "cvssV4_0": {
                "Automatable": "NOT_DEFINED",
                "Recovery": "USER",
                "Safety": "NOT_DEFINED",
                "attackComplexity": "LOW",
                "attackRequirements": "NONE",
                "attackVector": "NETWORK",
                "baseScore": 9.1,
                "baseSeverity": "CRITICAL",
                "exploitMaturity": "UNREPORTED",
                "privilegesRequired": "NONE",
                "providerUrgency": "RED",
                "subAvailabilityImpact": "HIGH",
                "subConfidentialityImpact": "HIGH",
                "subIntegrityImpact": "HIGH",
                "userInteraction": "NONE",
                "valueDensity": "CONCENTRATED",
                "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/R:U/V:C/RE:L/U:Red",
                "version": "4.0",
                "vulnAvailabilityImpact": "HIGH",
                "vulnConfidentialityImpact": "HIGH",
                "vulnIntegrityImpact": "HIGH",
                "vulnerabilityResponseEffort": "LOW"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-306",
                  "description": "CWE-306 Missing authentication for critical function",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-09-30T16:27:51.490Z",
            "orgId": "16cac6a8-cc1e-4741-89aa-6b97e2437706",
            "shortName": "hsi"
          },
          "references": [
            {
              "url": "https://psirt.havsys.com/"
            }
          ],
          "solutions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\u003ctable\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003e\u003cb\u003eProduct\u003c/b\u003e\u003c/td\u003e\u003ctd\u003e\u003cb\u003eRemediation\u003c/b\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eMove 4K 12X\u003c/td\u003e\u003ctd\u003eUpdate to Firmware 0.0.98.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eMove 4K 20X\u003c/td\u003e\u003ctd\u003eUpdate to Firmware 0.1.33.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eMove 4K 30X\u003c/td\u003e\u003ctd\u003eUpdate to Firmware 2.1.17.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eLink 4K 12X\u003c/td\u003e\u003ctd\u003eUpdate to Firmware 0.0.99.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eLink 4K 20X\u003c/td\u003e\u003ctd\u003eUpdate to Firmware 0.1.37.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eLink 4K 30X\u003c/td\u003e\u003ctd\u003eUpdate to Firmware 2.1.18.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eMove SE 12X\u0026nbsp;\u003c/td\u003e\u003ctd\u003eUpdate to Firmware 9.1.66.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eMove SE 20X\u0026nbsp;\u003c/td\u003e\u003ctd\u003eUpdate to Firmware 9.1.44.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eMove SE 30X\u0026nbsp;\u003c/td\u003e\u003ctd\u003eUpdate to Firmware 9.1.46.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eStudio 4K 12X\u003c/td\u003e\u003ctd\u003eUpdate to Firmware 8.3.32\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eStudio 4K 20X\u003c/td\u003e\u003ctd\u003eUpdate to Firmware 8.3.32.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eStudio SE 12X\u003c/td\u003e\u003ctd\u003eUpdate to Firmware 8.3.32.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eStudio SE 20X\u003c/td\u003e\u003ctd\u003eUpdate to Firmware 8.3.32\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003cp\u003e\u003cbr\u003e\u003c/p\u003e"
                }
              ],
              "value": "ProductRemediationMove 4K 12XUpdate to Firmware 0.0.98.Move 4K 20XUpdate to Firmware 0.1.33.Move 4K 30XUpdate to Firmware 2.1.17.Link 4K 12XUpdate to Firmware 0.0.99.Link 4K 20XUpdate to Firmware 0.1.37.Link 4K 30XUpdate to Firmware 2.1.18.Move SE 12X\u00a0Update to Firmware 9.1.66.Move SE 20X\u00a0Update to Firmware 9.1.44.Move SE 30X\u00a0Update to Firmware 9.1.46.Studio 4K 12XUpdate to Firmware 8.3.32Studio 4K 20XUpdate to Firmware 8.3.32.Studio SE 12XUpdate to Firmware 8.3.32.Studio SE 20XUpdate to Firmware 8.3.32"
            }
          ],
          "source": {
            "discovery": "EXTERNAL"
          },
          "title": "PTZOptics Missing Authentication in Firmware Upload",
          "workarounds": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\u003cul\u003e\u003cli\u003eDisable network services until the firmware can be updated.\u003c/li\u003e\u003cli\u003eRestrict access to the camera to a trusted management VLAN.\u003c/li\u003e\u003c/ul\u003e"
                }
              ],
              "value": "*  Disable network services until the firmware can be updated.\n  *  Restrict access to the camera to a trusted management VLAN."
            }
          ],
          "x_generator": {
            "engine": "Vulnogram 1.0.4"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "16cac6a8-cc1e-4741-89aa-6b97e2437706",
        "assignerShortName": "hsi",
        "cveId": "CVE-2026-75969",
        "datePublished": "2026-09-30T16:27:51.490Z",
        "dateReserved": "2026-08-18T17:26:08.229Z",
        "dateUpdated": "2026-09-30T20:01:02.432Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.