csaf_cisa - icsa-25-162-10

icsa-25-162-10

Vulnerability from csaf_cisa

Published

2025-06-12 06:00

Modified

2025-06-12 06:00

Summary

PTZOptics and Other Pan-Tilt-Zoom Cameras

Notes

Legal Notice

All information products included in https://us-cert.cisa.gov/ics are provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.

Risk evaluation

Successful exploitation of these vulnerabilities could allow an attacker to leak sensitive data, execute arbitrary commands, and access the admin web interface using hard-coded credentials.

Critical infrastructure sectors

Commercial Facilities, Critical Manufacturing, Government Services and Facilities, Healthcare and Public Health

Countries/areas deployed

Worldwide

Company headquarters location

PTZOptics - United States; multiCAM Systems - United States; ValueHD - China; SMTAV - China

Recommended Practices

CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as:

Recommended Practices

Minimize network exposure for all control system devices and/or systems, ensuring they are not accessible from the internet.

Recommended Practices

Locate control system networks and remote devices behind firewalls and isolating them from business networks.

Recommended Practices

When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs). Recognize VPNs may have vulnerabilities, should be updated to the most recent version available, and are only as secure as the connected devices.

Recommended Practices

CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.

Recommended Practices

CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.

Recommended Practices

CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets.

Recommended Practices

Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.

Recommended Practices

Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.

Recommended Practices

No known public exploitation specifically targeting these vulnerabilities has been reported to CISA at this time.

JSON

To clipboard

{
  "document": {
    "acknowledgments": [
      {
        "names": [
          "an anonymous researcher"
        ],
        "summary": "reporting these vulnerabilities to CISA"
      }
    ],
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Disclosure is not limited",
      "tlp": {
        "label": "WHITE",
        "url": "https://us-cert.cisa.gov/tlp/"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.",
        "title": "Legal Notice"
      },
      {
        "category": "summary",
        "text": "Successful exploitation of these vulnerabilities could allow an attacker to leak sensitive data, execute arbitrary commands, and access the admin web interface using hard-coded credentials. ",
        "title": "Risk evaluation"
      },
      {
        "category": "other",
        "text": "Commercial Facilities, Critical Manufacturing, Government Services and Facilities, Healthcare and Public Health",
        "title": "Critical infrastructure sectors"
      },
      {
        "category": "other",
        "text": "Worldwide",
        "title": "Countries/areas deployed"
      },
      {
        "category": "other",
        "text": "PTZOptics - United States; multiCAM Systems - United States; ValueHD - China; SMTAV - China",
        "title": "Company headquarters location"
      },
      {
        "category": "general",
        "text": "CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as:",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "Minimize network exposure for all control system devices and/or systems, ensuring they are not accessible from the internet.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "Locate control system networks and remote devices behind firewalls and isolating them from business networks.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs). Recognize VPNs may have vulnerabilities, should be updated to the most recent version available, and are only as secure as the connected devices.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "No known public exploitation specifically targeting these vulnerabilities has been reported to CISA at this time.",
        "title": "Recommended Practices"
      }
    ],
    "publisher": {
      "category": "coordinator",
      "contact_details": "central@cisa.dhs.gov",
      "name": "CISA",
      "namespace": "https://www.cisa.gov/"
    },
    "references": [
      {
        "category": "self",
        "summary": "ICS Advisory ICSA-25-162-10 JSON",
        "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2025/icsa-25-162-10.json"
      },
      {
        "category": "self",
        "summary": "ICSA Advisory ICSA-25-162-10 - Web Version",
        "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-10"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/topics/industrial-control-systems"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/uscert/ncas/tips/ST04-014"
      }
    ],
    "title": "PTZOptics and Other Pan-Tilt-Zoom Cameras",
    "tracking": {
      "current_release_date": "2025-06-12T06:00:00.000000Z",
      "generator": {
        "date": "2025-06-12T14:40:48.605025Z",
        "engine": {
          "name": "CISA CSAF Generator",
          "version": "1.0.0"
        }
      },
      "id": "ICSA-25-162-10",
      "initial_release_date": "2025-06-12T06:00:00.000000Z",
      "revision_history": [
        {
          "date": "2025-06-12T06:00:00.000000Z",
          "legacy_version": "Initial",
          "number": "1",
          "summary": "Initial Publication"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c=6.3.34",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV PTZOptics PT12X-SDI-xx-G2: \u003c=6.3.34",
                  "product_id": "CSAFPID-0001"
                }
              }
            ],
            "category": "product_name",
            "name": "PTZOptics PT12X-SDI-xx-G2"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c=6.3.34",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV PTZOptics PT12X-NDI-xx: \u003c=6.3.34",
                  "product_id": "CSAFPID-0002"
                }
              }
            ],
            "category": "product_name",
            "name": "PTZOptics PT12X-NDI-xx"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c=6.2.81",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV PTZOptics PT12X-USB-xx-G2: \u003c=6.2.81",
                  "product_id": "CSAFPID-0003"
                }
              }
            ],
            "category": "product_name",
            "name": "PTZOptics PT12X-USB-xx-G2"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c=6.3.20",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV PTZOptics PT20X-SDI-xx-G2: \u003c=6.3.20",
                  "product_id": "CSAFPID-0004"
                }
              }
            ],
            "category": "product_name",
            "name": "PTZOptics PT20X-SDI-xx-G2"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c=6.3.20",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV PTZOptics PT20X-NDI-xx: \u003c=6.3.20",
                  "product_id": "CSAFPID-0005"
                }
              }
            ],
            "category": "product_name",
            "name": "PTZOptics PT20X-NDI-xx"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c=6.2.73",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV PTZOptics PT20X-USB-xx-G2: \u003c=6.2.73",
                  "product_id": "CSAFPID-0006"
                }
              }
            ],
            "category": "product_name",
            "name": "PTZOptics PT20X-USB-xx-G2"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c=6.3.30",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV PTZOptics PT30X-SDI-xx-G2: \u003c=6.3.30",
                  "product_id": "CSAFPID-0007"
                }
              }
            ],
            "category": "product_name",
            "name": "PTZOptics PT30X-SDI-xx-G2"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c=6.3.30",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV PTZOptics PT30X-NDI-xx: \u003c=6.3.30",
                  "product_id": "CSAFPID-0008"
                }
              }
            ],
            "category": "product_name",
            "name": "PTZOptics PT30X-NDI-xx"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c=7.2.76",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV PTZOptics PT12X-ZCAM: \u003c=7.2.76",
                  "product_id": "CSAFPID-0009"
                }
              }
            ],
            "category": "product_name",
            "name": "PTZOptics PT12X-ZCAM"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c=7.2.82",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV PTZOptics PT20X-ZCAM: \u003c=7.2.82",
                  "product_id": "CSAFPID-0010"
                }
              }
            ],
            "category": "product_name",
            "name": "PTZOptics PT20X-ZCAM"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c=7.2.79",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV PTZOptics PTVL-ZCAM: \u003c=7.2.79",
                  "product_id": "CSAFPID-0011"
                }
              }
            ],
            "category": "product_name",
            "name": "PTZOptics PTVL-ZCAM"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c=8.1.81",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV PTZOptics PTEPTZ-ZCAM-G2: \u003c=8.1.81",
                  "product_id": "CSAFPID-0012"
                }
              }
            ],
            "category": "product_name",
            "name": "PTZOptics PTEPTZ-ZCAM-G2"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c=8.1.81",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV PTZOptics PTEPTZ-NDI-ZCAM-G2: \u003c=8.1.81",
                  "product_id": "CSAFPID-0013"
                }
              }
            ],
            "category": "product_name",
            "name": "PTZOptics PTEPTZ-NDI-ZCAM-G2"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV PTZOptics PT12X-SDI-xx-G2: vers:all/*",
                  "product_id": "CSAFPID-0014"
                }
              }
            ],
            "category": "product_name",
            "name": "PTZOptics PT12X-SDI-xx-G2"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV PTZOptics PT12X-NDI-xx: vers:all/*",
                  "product_id": "CSAFPID-0015"
                }
              }
            ],
            "category": "product_name",
            "name": "PTZOptics PT12X-NDI-xx"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV PTZOptics PT12X-USB-xx-G2: vers:all/*",
                  "product_id": "CSAFPID-0016"
                }
              }
            ],
            "category": "product_name",
            "name": "PTZOptics PT12X-USB-xx-G2"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV PTZOptics PT20X-SDI-xx-G2: vers:all/*",
                  "product_id": "CSAFPID-0017"
                }
              }
            ],
            "category": "product_name",
            "name": "PTZOptics PT20X-SDI-xx-G2"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV PTZOpticsPT20X-NDI-xx: vers:all/*",
                  "product_id": "CSAFPID-0018"
                }
              }
            ],
            "category": "product_name",
            "name": "PTZOpticsPT20X-NDI-xx"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV PTZOptics PT20X-USB-xx-G2: vers:all/*",
                  "product_id": "CSAFPID-0019"
                }
              }
            ],
            "category": "product_name",
            "name": "PTZOptics PT20X-USB-xx-G2"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV PTZOptics PT30X-SDI-xx-G2: vers:all/*",
                  "product_id": "CSAFPID-0020"
                }
              }
            ],
            "category": "product_name",
            "name": "PTZOptics PT30X-SDI-xx-G2"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV PTZOptics PT30X-NDI-xx: vers:all/*",
                  "product_id": "CSAFPID-0021"
                }
              }
            ],
            "category": "product_name",
            "name": "PTZOptics PT30X-NDI-xx"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV PTZOptics PT12X-ZCAM: vers:all/*",
                  "product_id": "CSAFPID-0022"
                }
              }
            ],
            "category": "product_name",
            "name": "PTZOptics PT12X-ZCAM"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV PTZOptics PT20X-ZCAM: vers:all/*",
                  "product_id": "CSAFPID-0023"
                }
              }
            ],
            "category": "product_name",
            "name": "PTZOptics PT20X-ZCAM"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV PTZOptics PTVL-ZCAM: vers:all/*",
                  "product_id": "CSAFPID-0024"
                }
              }
            ],
            "category": "product_name",
            "name": "PTZOptics PTVL-ZCAM"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV PTZOptics PTEPTZ-ZCAM-G2: vers:all/*",
                  "product_id": "CSAFPID-0025"
                }
              }
            ],
            "category": "product_name",
            "name": "PTZOptics PTEPTZ-ZCAM-G2"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c=0.0.58",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV PTZOptics PT12X-4K-xx-G3: \u003c=0.0.58",
                  "product_id": "CSAFPID-0026"
                }
              }
            ],
            "category": "product_name",
            "name": "PTZOptics PT12X-4K-xx-G3"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c=0.0.85",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV PTZOptics PT20X-4K-xx-G3: \u003c=0.0.85",
                  "product_id": "CSAFPID-0027"
                }
              }
            ],
            "category": "product_name",
            "name": "PTZOptics PT20X-4K-xx-G3"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c=2.0.64",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV PTZOptics PT30X-4K-xx-G3: \u003c=2.0.64",
                  "product_id": "CSAFPID-0028"
                }
              }
            ],
            "category": "product_name",
            "name": "PTZOptics PT30X-4K-xx-G3"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c=0.0.63",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV PTZOptics PT12X-LINK-4K-xx: \u003c=0.0.63",
                  "product_id": "CSAFPID-0029"
                }
              }
            ],
            "category": "product_name",
            "name": "PTZOptics PT12X-LINK-4K-xx"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c=0.0.89",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV PTZOptics PT20X-LINK-4K-xx: \u003c=0.0.89",
                  "product_id": "CSAFPID-0030"
                }
              }
            ],
            "category": "product_name",
            "name": "PTZOptics PT20X-LINK-4K-xx"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c=2.0.71",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV PTZOptics PT30X-LINK-4K-xx: \u003c=2.0.71",
                  "product_id": "CSAFPID-0031"
                }
              }
            ],
            "category": "product_name",
            "name": "PTZOptics PT30X-LINK-4K-xx"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c=9.1.43",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV PTZOptics PT12X-SE-xx-G3: \u003c=9.1.43",
                  "product_id": "CSAFPID-0032"
                }
              }
            ],
            "category": "product_name",
            "name": "PTZOptics PT12X-SE-xx-G3"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c=9.1.32",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV PTZOptics PT20X-SE-xx-G3: \u003c=9.1.32",
                  "product_id": "CSAFPID-0033"
                }
              }
            ],
            "category": "product_name",
            "name": "PTZOptics PT20X-SE-xx-G3"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c=9.1.33",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV PTZOptics PT30X-SE-xx-G3: \u003c=9.1.33",
                  "product_id": "CSAFPID-0034"
                }
              }
            ],
            "category": "product_name",
            "name": "PTZOptics PT30X-SE-xx-G3"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c=9.0.41",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV PTZOptics PT-STUDIOPRO: \u003c=9.0.41",
                  "product_id": "CSAFPID-0035"
                }
              }
            ],
            "category": "product_name",
            "name": "PTZOptics PT-STUDIOPRO"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c=7.2.94",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV PTZOptics PTZOptics VL Fixed Camera/NDI Fixed Camera: \u003c=7.2.94",
                  "product_id": "CSAFPID-0036"
                }
              }
            ],
            "category": "product_name",
            "name": "PTZOptics PTZOptics VL Fixed Camera/NDI Fixed Camera"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV SMTAV Pan-Tilt-Zoom Cameras: vers:all/*",
                  "product_id": "CSAFPID-0037"
                }
              }
            ],
            "category": "product_name",
            "name": "SMTAV Pan-Tilt-Zoom Cameras"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV multiCAM Systems Pan-Tilt-Zoom Cameras: vers:all/*",
                  "product_id": "CSAFPID-0038"
                }
              }
            ],
            "category": "product_name",
            "name": "multiCAM Systems Pan-Tilt-Zoom Cameras"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV ValueHD Pan-Tilt-Zoom Cameras: vers:all/*",
                  "product_id": "CSAFPID-0039"
                }
              }
            ],
            "category": "product_name",
            "name": "ValueHD Pan-Tilt-Zoom Cameras"
          }
        ],
        "category": "vendor",
        "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-8956",
      "cwe": {
        "id": "CWE-287",
        "name": "Improper Authentication"
      },
      "notes": [
        {
          "category": "summary",
          "text": "PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an insufficient authentication issue. The camera does not properly enforce authentication to /cgi-bin/param.cgi when requests are sent without an HTTP Authorization header. The result is a remote and unauthenticated attacker can leak sensitive data such as usernames, password hashes, and configurations details. Additionally, the attacker can update individual configuration values or overwrite the whole file.",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0036",
          "CSAFPID-0037",
          "CSAFPID-0038",
          "CSAFPID-0039"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-8956"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "PTZOptics has provided a fix to the affected versions for the listed CVEs. The fix for each product can be obtained on the PTZOptics Known Vulnerabilities and Fixes site.",
          "product_ids": [
            "CSAFPID-0036",
            "CSAFPID-0037",
            "CSAFPID-0038",
            "CSAFPID-0039"
          ],
          "url": "https://ptzoptics.com/known-vulnerabilities-and-fixes/"
        },
        {
          "category": "mitigation",
          "details": "ValueHD, multiCAM Systems, and SMTAV did not respond to requests for coordination. Please contact the respective companies through the following means for more information:",
          "product_ids": [
            "CSAFPID-0036",
            "CSAFPID-0037",
            "CSAFPID-0038",
            "CSAFPID-0039"
          ]
        },
        {
          "category": "mitigation",
          "details": "SMTAV Contact Us page.",
          "product_ids": [
            "CSAFPID-0036",
            "CSAFPID-0037",
            "CSAFPID-0038",
            "CSAFPID-0039"
          ],
          "url": "https://www.smtav.com/pages/about"
        },
        {
          "category": "mitigation",
          "details": "multiCAM Systems Contact Us page.",
          "product_ids": [
            "CSAFPID-0036",
            "CSAFPID-0037",
            "CSAFPID-0038",
            "CSAFPID-0039"
          ],
          "url": "https://www.multicam-systems.com/contact/"
        },
        {
          "category": "mitigation",
          "details": "ValueHD Contact Us page.",
          "product_ids": [
            "CSAFPID-0036",
            "CSAFPID-0037",
            "CSAFPID-0038",
            "CSAFPID-0039"
          ],
          "url": "https://global.vhd.com.cn/list-42.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0036",
            "CSAFPID-0037",
            "CSAFPID-0038",
            "CSAFPID-0039"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2024-8957",
      "cwe": {
        "id": "CWE-78",
        "name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
      },
      "notes": [
        {
          "category": "summary",
          "text": "PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an OS command injection issue. The camera does not sufficiently validate the ntp_addr configuration value which may lead to arbitrary command execution when ntp_client is started. When chained with CVE-2024-8956, a remote and unauthenticated attacker can execute arbitrary OS commands on affected devices.",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0036",
          "CSAFPID-0037",
          "CSAFPID-0038",
          "CSAFPID-0039"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-8957"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "PTZOptics has provided a fix to the affected versions for the listed CVEs. The fix for each product can be obtained on the PTZOptics Known Vulnerabilities and Fixes site.",
          "product_ids": [
            "CSAFPID-0036",
            "CSAFPID-0037",
            "CSAFPID-0038",
            "CSAFPID-0039"
          ],
          "url": "https://ptzoptics.com/known-vulnerabilities-and-fixes/"
        },
        {
          "category": "mitigation",
          "details": "ValueHD, multiCAM Systems, and SMTAV did not respond to requests for coordination. Please contact the respective companies through the following means for more information:",
          "product_ids": [
            "CSAFPID-0036",
            "CSAFPID-0037",
            "CSAFPID-0038",
            "CSAFPID-0039"
          ]
        },
        {
          "category": "mitigation",
          "details": "SMTAV Contact Us page.",
          "product_ids": [
            "CSAFPID-0036",
            "CSAFPID-0037",
            "CSAFPID-0038",
            "CSAFPID-0039"
          ],
          "url": "https://www.smtav.com/pages/about"
        },
        {
          "category": "mitigation",
          "details": "multiCAM Systems Contact Us page.",
          "product_ids": [
            "CSAFPID-0036",
            "CSAFPID-0037",
            "CSAFPID-0038",
            "CSAFPID-0039"
          ],
          "url": "https://www.multicam-systems.com/contact/"
        },
        {
          "category": "mitigation",
          "details": "ValueHD Contact Us page.",
          "product_ids": [
            "CSAFPID-0036",
            "CSAFPID-0037",
            "CSAFPID-0038",
            "CSAFPID-0039"
          ],
          "url": "https://global.vhd.com.cn/list-42.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0036",
            "CSAFPID-0037",
            "CSAFPID-0038",
            "CSAFPID-0039"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2025-35451",
      "cwe": {
        "id": "CWE-798",
        "name": "Use of Hard-coded Credentials"
      },
      "notes": [
        {
          "category": "summary",
          "text": "Certain PTZOptics and possibly other ValueHD-based cameras have SSH or telnet or both enabled by default. Operating system users with administrative privileges (including the root user) have default passwords that are trivial to crack. The passwords cannot be changed by the user, nor can the SSH or telnet service be disabled by the user.",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001",
          "CSAFPID-0002",
          "CSAFPID-0003",
          "CSAFPID-0004",
          "CSAFPID-0005",
          "CSAFPID-0006",
          "CSAFPID-0007",
          "CSAFPID-0008",
          "CSAFPID-0009",
          "CSAFPID-0010",
          "CSAFPID-0011",
          "CSAFPID-0012",
          "CSAFPID-0013",
          "CSAFPID-0036",
          "CSAFPID-0037",
          "CSAFPID-0038",
          "CSAFPID-0039"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-35451"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "PTZOptics has provided a fix to the affected versions for the listed CVEs. The fix for each product can be obtained on the PTZOptics Known Vulnerabilities and Fixes site.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-0010",
            "CSAFPID-0011",
            "CSAFPID-0012",
            "CSAFPID-0013",
            "CSAFPID-0036",
            "CSAFPID-0037",
            "CSAFPID-0038",
            "CSAFPID-0039"
          ],
          "url": "https://ptzoptics.com/known-vulnerabilities-and-fixes/"
        },
        {
          "category": "mitigation",
          "details": "ValueHD, multiCAM Systems, and SMTAV did not respond to requests for coordination. Please contact the respective companies through the following means for more information:",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-0010",
            "CSAFPID-0011",
            "CSAFPID-0012",
            "CSAFPID-0013",
            "CSAFPID-0036",
            "CSAFPID-0037",
            "CSAFPID-0038",
            "CSAFPID-0039"
          ]
        },
        {
          "category": "mitigation",
          "details": "SMTAV Contact Us page.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-0010",
            "CSAFPID-0011",
            "CSAFPID-0012",
            "CSAFPID-0013",
            "CSAFPID-0036",
            "CSAFPID-0037",
            "CSAFPID-0038",
            "CSAFPID-0039"
          ],
          "url": "https://www.smtav.com/pages/about"
        },
        {
          "category": "mitigation",
          "details": "multiCAM Systems Contact Us page.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-0010",
            "CSAFPID-0011",
            "CSAFPID-0012",
            "CSAFPID-0013",
            "CSAFPID-0036",
            "CSAFPID-0037",
            "CSAFPID-0038",
            "CSAFPID-0039"
          ],
          "url": "https://www.multicam-systems.com/contact/"
        },
        {
          "category": "mitigation",
          "details": "ValueHD Contact Us page.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-0010",
            "CSAFPID-0011",
            "CSAFPID-0012",
            "CSAFPID-0013",
            "CSAFPID-0036",
            "CSAFPID-0037",
            "CSAFPID-0038",
            "CSAFPID-0039"
          ],
          "url": "https://global.vhd.com.cn/list-42.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-0010",
            "CSAFPID-0011",
            "CSAFPID-0012",
            "CSAFPID-0013",
            "CSAFPID-0036",
            "CSAFPID-0037",
            "CSAFPID-0038",
            "CSAFPID-0039"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2025-35452",
      "cwe": {
        "id": "CWE-798",
        "name": "Use of Hard-coded Credentials"
      },
      "notes": [
        {
          "category": "summary",
          "text": "PTZOptics and possibly other ValueHD-based cameras use a default, shared password for the administrative web interface. The table below shows the affected firmware. This has been patched on production firmware for the current generation of devices.",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0014",
          "CSAFPID-0015",
          "CSAFPID-0016",
          "CSAFPID-0017",
          "CSAFPID-0018",
          "CSAFPID-0019",
          "CSAFPID-0020",
          "CSAFPID-0021",
          "CSAFPID-0022",
          "CSAFPID-0023",
          "CSAFPID-0024",
          "CSAFPID-0025",
          "CSAFPID-0026",
          "CSAFPID-0027",
          "CSAFPID-0028",
          "CSAFPID-0029",
          "CSAFPID-0030",
          "CSAFPID-0031",
          "CSAFPID-0032",
          "CSAFPID-0033",
          "CSAFPID-0034",
          "CSAFPID-0035",
          "CSAFPID-0036",
          "CSAFPID-0037",
          "CSAFPID-0038",
          "CSAFPID-0039"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-35452"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "PTZOptics has provided a fix to the affected versions for the listed CVEs. The fix for each product can be obtained on the PTZOptics Known Vulnerabilities and Fixes site.",
          "product_ids": [
            "CSAFPID-0014",
            "CSAFPID-0015",
            "CSAFPID-0016",
            "CSAFPID-0017",
            "CSAFPID-0018",
            "CSAFPID-0019",
            "CSAFPID-0020",
            "CSAFPID-0021",
            "CSAFPID-0022",
            "CSAFPID-0023",
            "CSAFPID-0024",
            "CSAFPID-0025",
            "CSAFPID-0026",
            "CSAFPID-0027",
            "CSAFPID-0028",
            "CSAFPID-0029",
            "CSAFPID-0030",
            "CSAFPID-0031",
            "CSAFPID-0032",
            "CSAFPID-0033",
            "CSAFPID-0034",
            "CSAFPID-0035",
            "CSAFPID-0036",
            "CSAFPID-0037",
            "CSAFPID-0038",
            "CSAFPID-0039"
          ],
          "url": "https://ptzoptics.com/known-vulnerabilities-and-fixes/"
        },
        {
          "category": "mitigation",
          "details": "ValueHD, multiCAM Systems, and SMTAV did not respond to requests for coordination. Please contact the respective companies through the following means for more information:",
          "product_ids": [
            "CSAFPID-0014",
            "CSAFPID-0015",
            "CSAFPID-0016",
            "CSAFPID-0017",
            "CSAFPID-0018",
            "CSAFPID-0019",
            "CSAFPID-0020",
            "CSAFPID-0021",
            "CSAFPID-0022",
            "CSAFPID-0023",
            "CSAFPID-0024",
            "CSAFPID-0025",
            "CSAFPID-0026",
            "CSAFPID-0027",
            "CSAFPID-0028",
            "CSAFPID-0029",
            "CSAFPID-0030",
            "CSAFPID-0031",
            "CSAFPID-0032",
            "CSAFPID-0033",
            "CSAFPID-0034",
            "CSAFPID-0035",
            "CSAFPID-0036",
            "CSAFPID-0037",
            "CSAFPID-0038",
            "CSAFPID-0039"
          ]
        },
        {
          "category": "mitigation",
          "details": "SMTAV Contact Us page.",
          "product_ids": [
            "CSAFPID-0014",
            "CSAFPID-0015",
            "CSAFPID-0016",
            "CSAFPID-0017",
            "CSAFPID-0018",
            "CSAFPID-0019",
            "CSAFPID-0020",
            "CSAFPID-0021",
            "CSAFPID-0022",
            "CSAFPID-0023",
            "CSAFPID-0024",
            "CSAFPID-0025",
            "CSAFPID-0026",
            "CSAFPID-0027",
            "CSAFPID-0028",
            "CSAFPID-0029",
            "CSAFPID-0030",
            "CSAFPID-0031",
            "CSAFPID-0032",
            "CSAFPID-0033",
            "CSAFPID-0034",
            "CSAFPID-0035",
            "CSAFPID-0036",
            "CSAFPID-0037",
            "CSAFPID-0038",
            "CSAFPID-0039"
          ],
          "url": "https://www.smtav.com/pages/about"
        },
        {
          "category": "mitigation",
          "details": "multiCAM Systems Contact Us page.",
          "product_ids": [
            "CSAFPID-0014",
            "CSAFPID-0015",
            "CSAFPID-0016",
            "CSAFPID-0017",
            "CSAFPID-0018",
            "CSAFPID-0019",
            "CSAFPID-0020",
            "CSAFPID-0021",
            "CSAFPID-0022",
            "CSAFPID-0023",
            "CSAFPID-0024",
            "CSAFPID-0025",
            "CSAFPID-0026",
            "CSAFPID-0027",
            "CSAFPID-0028",
            "CSAFPID-0029",
            "CSAFPID-0030",
            "CSAFPID-0031",
            "CSAFPID-0032",
            "CSAFPID-0033",
            "CSAFPID-0034",
            "CSAFPID-0035",
            "CSAFPID-0036",
            "CSAFPID-0037",
            "CSAFPID-0038",
            "CSAFPID-0039"
          ],
          "url": "https://www.multicam-systems.com/contact/"
        },
        {
          "category": "mitigation",
          "details": "ValueHD Contact Us page.",
          "product_ids": [
            "CSAFPID-0014",
            "CSAFPID-0015",
            "CSAFPID-0016",
            "CSAFPID-0017",
            "CSAFPID-0018",
            "CSAFPID-0019",
            "CSAFPID-0020",
            "CSAFPID-0021",
            "CSAFPID-0022",
            "CSAFPID-0023",
            "CSAFPID-0024",
            "CSAFPID-0025",
            "CSAFPID-0026",
            "CSAFPID-0027",
            "CSAFPID-0028",
            "CSAFPID-0029",
            "CSAFPID-0030",
            "CSAFPID-0031",
            "CSAFPID-0032",
            "CSAFPID-0033",
            "CSAFPID-0034",
            "CSAFPID-0035",
            "CSAFPID-0036",
            "CSAFPID-0037",
            "CSAFPID-0038",
            "CSAFPID-0039"
          ],
          "url": "https://global.vhd.com.cn/list-42.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0014",
            "CSAFPID-0015",
            "CSAFPID-0016",
            "CSAFPID-0017",
            "CSAFPID-0018",
            "CSAFPID-0019",
            "CSAFPID-0020",
            "CSAFPID-0021",
            "CSAFPID-0022",
            "CSAFPID-0023",
            "CSAFPID-0024",
            "CSAFPID-0025",
            "CSAFPID-0026",
            "CSAFPID-0027",
            "CSAFPID-0028",
            "CSAFPID-0029",
            "CSAFPID-0030",
            "CSAFPID-0031",
            "CSAFPID-0032",
            "CSAFPID-0033",
            "CSAFPID-0034",
            "CSAFPID-0035",
            "CSAFPID-0036",
            "CSAFPID-0037",
            "CSAFPID-0038",
            "CSAFPID-0039"
          ]
        }
      ]
    }
  ]
}

CVE-2024-8957 (GCVE-0-2024-8957)

Vulnerability from cvelistv5

Published

2024-09-17 20:08

Modified

2025-09-08 18:29

Severity ?

7.2 (High) - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Summary

PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an OS command injection issue. The camera does not sufficiently validate the ntp_addr configuration value which may lead to arbitrary command execution when ntp_client is started. When chained with CVE-2024-8956, a remote and unauthenticated attacker can execute arbitrary OS commands on affected devices.

References

▼	URL	Tags
	https://ptzoptics.com/firmware-changelog/	vendor-advisory
	https://vulncheck.com/advisories/ptzoptics-command-injection	third-party-advisory

Impacted products

Vendor

Product

Version

▼

Version: 0 ≤

Version: 0 ≤

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:o:ptzoptics:pt30x-sdi_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pt30x-sdi_firmware",
            "vendor": "ptzoptics",
            "versions": [
              {
                "lessThan": "6.3.40",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:ptzoptics:pt30x-ndi_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pt30x-ndi_firmware",
            "vendor": "ptzoptics",
            "versions": [
              {
                "lessThan": "6.3.40",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-8957",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-09-08T18:25:10.384044Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2024-11-04",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-8957"
              },
              "type": "kev"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-09-08T18:29:42.970Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit",
              "technical-description",
              "third-party-advisory"
            ],
            "url": "https://www.labs.greynoise.io/grimoire/2024-10-31-sift-0-day-rce/"
          },
          {
            "url": "https://www.greynoise.io/blog/greynoise-intelligence-discovers-zero-day-vulnerabilities-in-live-streaming-cameras-with-the-help-of-ai"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "PT30X-SDI",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "6.3.40",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "PT30X-NDI",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "6.3.40",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Konstantin Lazarev of GreyNoise"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an OS command injection issue. The camera does not sufficiently validate the ntp_addr configuration value which may lead to arbitrary command execution when ntp_client is started. When chained with CVE-2024-8956, a remote and unauthenticated attacker can execute arbitrary OS commands on affected devices.\u003cbr\u003e"
            }
          ],
          "value": "PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an OS command injection issue. The camera does not sufficiently validate the ntp_addr configuration value which may lead to arbitrary command execution when ntp_client is started. When chained with CVE-2024-8956, a remote and unauthenticated attacker can execute arbitrary OS commands on affected devices."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-88",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-88 OS Command Injection"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-09-17T20:08:25.588Z",
        "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
        "shortName": "VulnCheck"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://ptzoptics.com/firmware-changelog/"
        },
        {
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vulncheck.com/advisories/ptzoptics-command-injection"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "tags": [
        "x_known-exploited-vulnerability"
      ],
      "title": "PTZOptics NDI and SDI Cameras Command Injection via NTP Address Configuration",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
    "assignerShortName": "VulnCheck",
    "cveId": "CVE-2024-8957",
    "datePublished": "2024-09-17T20:08:25.588Z",
    "dateReserved": "2024-09-17T19:08:48.129Z",
    "dateUpdated": "2025-09-08T18:29:42.970Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2025-35451 (GCVE-0-2025-35451)

Vulnerability from cvelistv5

Published

2025-09-05 17:43

Modified

2025-09-08 18:08

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.3 (Critical) - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CWE

CWE-798 - Use of Hard-coded Credentials

Summary

PTZOptics and possibly other ValueHD-based pan-tilt-zoom cameras use hard-coded, default administrative credentials. The passwords can readily be cracked. Many cameras have SSH or telnet listening on all interfaces. The passwords cannot be changed by the user, nor can the SSH or telnet service be disabled by the user.

References

▼	URL	Tags
	https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-10
	https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-162-10.json
	https://www.cve.org/CVERecord?id=CVE-2025-35451
	https://www.labs.greynoise.io/grimoire/2024-10-31-sift-0-day-rce/
	https://www.greynoise.io/blog/greynoise-intelligence-discovers-zero-day-vulnerabilities-in-live-streaming-cameras-with-the-help-of-ai

Impacted products

Vendor

Product

Version

▼

PTZOptics

PT12X-SE-xx-G3

Version: 0 < 9.1.43

PTZOptics	PT12X-LINK-4K-xx	Version: 0 < 0.0.63
PTZOptics	PT20X-SE-xx-G3	Version: 0 < 9.1.32
PTZOptics	PT20X-LINK-4K-xx	Version: 0 < 0.0.89
PTZOptics	PT-STUDIOPRO	Version: 0 < 9.0.41
PTZOptics	PT30X-SE-xx-G3	Version: 0 < 9.1.33
PTZOptics	PT30X-LINK-4K-xx	Version: 0 < 2.0.71
PTZOptics	PT12X-STUDIO-4K-xx-G3	Version: 0 < 8.1.90
PTZOptics	PT20X-STUDIO-4K-xx-G3	Version: 0 < 8.1.90
PTZOptics	PT12X-SDI/NDI-xx	Version: 0 < 6.3.70
PTZOptics	PT12X-USB-xx	Version: 0 < 6.2.88
PTZOptics	PT20X-SDI/NDI-xx	Version: 0 < 6.3.27
SMTAV	Pan-Tilt-Zoom Cameras	Version: *
PTZOptics	PT30X-SDI/NDI-xx	Version: 0 < 6.3.43
multiCAM Systems	Pan-Tilt-Zoom Cameras	Version: *
PTZOptics	VL Fixed Camera/NDI Fixed Camera	Version: 0 < 7.2.94
PTZOptics	12x Fixed Camera/NDI Fixed Camera	Version: 0 < 7.2.85
PTZOptics	20x Fixed Camera/NDI Fixed Camera	Version: 0 < 7.2.94
PTZOptics	EPTZ Fixed Camera/NDI Fixed Camera	Version: 0 < 8.1.89
PTZOptics	HC-EPTZ-NDI	Version: 0 < 8.2.14
PTZOptics	PT12X-4K-xx-G3	Version: 0 < 0.0.58
PTZOptics	PT20X-4K-xx-G3	Version: 0 < 0.0.85
PTZOptics	PT20X-USB-xx	Version: 0 < 6.2.81
PTZOptics	PT30X-4K-xx-G3	Version: 0 < 2.0.64
ValueHD	Pan-Tilt-Zoom Cameras	Version: *

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-35451",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-09-08T18:08:16.124259Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-09-08T18:08:29.882Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "PT12X-SE-xx-G3",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "9.1.43",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "9.1.43"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "PT12X-LINK-4K-xx",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "0.0.63",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "0.0.63"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "PT20X-SE-xx-G3",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "9.1.32",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "9.1.32"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "PT20X-LINK-4K-xx",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "0.0.89",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "0.0.89"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "PT-STUDIOPRO",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "9.0.41",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "9.0.41"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "PT30X-SE-xx-G3",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "9.1.33",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "9.1.33"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "PT30X-LINK-4K-xx",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "2.0.71",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "2.0.71"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "PT12X-STUDIO-4K-xx-G3",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "8.1.90",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "8.1.90"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "PT20X-STUDIO-4K-xx-G3",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "8.1.90",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "8.1.90"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "PT12X-SDI/NDI-xx",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "6.3.70",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "6.3.70"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "PT12X-USB-xx",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "6.2.88",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "6.2.88"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "PT20X-SDI/NDI-xx",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "6.3.27",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "6.3.27"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "Pan-Tilt-Zoom Cameras",
          "vendor": "SMTAV",
          "versions": [
            {
              "status": "affected",
              "version": "*"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "PT30X-SDI/NDI-xx",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "6.3.43",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "6.3.43"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "Pan-Tilt-Zoom Cameras",
          "vendor": "multiCAM Systems",
          "versions": [
            {
              "status": "affected",
              "version": "*"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "VL Fixed Camera/NDI Fixed Camera",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "7.2.94",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "7.2.94"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "12x Fixed Camera/NDI Fixed Camera",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "7.2.85",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "7.2.85"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "20x Fixed Camera/NDI Fixed Camera",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "7.2.94",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "7.2.94"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "EPTZ Fixed Camera/NDI Fixed Camera",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "8.1.89",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "8.1.89"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "HC-EPTZ-NDI",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "8.2.14",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "8.2.14"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "PT12X-4K-xx-G3",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "0.0.58",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "0.0.58"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "PT20X-4K-xx-G3",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "0.0.85",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "0.0.85"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "PT20X-USB-xx",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "6.2.81",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "6.2.81"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "PT30X-4K-xx-G3",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "2.0.64",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "2.0.64"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "Pan-Tilt-Zoom Cameras",
          "vendor": "ValueHD",
          "versions": [
            {
              "status": "affected",
              "version": "*"
            }
          ]
        }
      ],
      "datePublic": "2025-06-12T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "PTZOptics and possibly other ValueHD-based pan-tilt-zoom cameras use hard-coded, default administrative credentials. The passwords can readily be cracked. Many cameras have SSH or telnet listening on all interfaces. The passwords cannot be changed by the user, nor can the SSH or telnet service be disabled by the user."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        },
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 9.3,
            "baseSeverity": "CRITICAL",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH"
          }
        },
        {
          "other": {
            "content": {
              "id": "CVE-2025-35451",
              "options": [
                {
                  "Exploitation": "none"
                },
                {
                  "Automatable": "yes"
                },
                {
                  "Technical Impact": "total"
                }
              ],
              "role": "CISA Coordinator",
              "timestamp": "2025-09-08T17:57:46.995811Z",
              "version": "2.0.3"
            },
            "type": "ssvc"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-798",
              "description": "CWE-798 Use of Hard-coded Credentials",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-09-08T17:58:14.754Z",
        "orgId": "9119a7d8-5eab-497f-8521-727c672e3725",
        "shortName": "cisa-cg"
      },
      "references": [
        {
          "name": "url",
          "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-10"
        },
        {
          "name": "url",
          "url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-162-10.json"
        },
        {
          "name": "url",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-35451"
        },
        {
          "name": "url",
          "url": "https://www.labs.greynoise.io/grimoire/2024-10-31-sift-0-day-rce/"
        },
        {
          "name": "url",
          "url": "https://www.greynoise.io/blog/greynoise-intelligence-discovers-zero-day-vulnerabilities-in-live-streaming-cameras-with-the-help-of-ai"
        }
      ],
      "title": "Pan-Tilt-Zoom cameras hard-coded default passwords with SSH and telnet enabled"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9119a7d8-5eab-497f-8521-727c672e3725",
    "assignerShortName": "cisa-cg",
    "cveId": "CVE-2025-35451",
    "datePublished": "2025-09-05T17:43:53.108Z",
    "dateReserved": "2025-04-15T20:57:14.282Z",
    "dateUpdated": "2025-09-08T18:08:29.882Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2025-35452 (GCVE-0-2025-35452)

Vulnerability from cvelistv5

Published

2025-09-05 17:49

Modified

2025-09-08 18:07

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.2 (Critical) - CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CWE

CWE-798 - Use of Hard-coded Credentials
CWE-1392 - Use of Default Credentials

Summary

PTZOptics and possibly other ValueHD-based pan-tilt-zoom cameras use default, shared credentials for the administrative web interface.

References

▼	URL	Tags
	https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-10
	https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-162-10.json
	https://www.cve.org/CVERecord?id=CVE-2025-35452
	https://www.labs.greynoise.io/grimoire/2024-10-31-sift-0-day-rce/
	https://www.greynoise.io/blog/greynoise-intelligence-discovers-zero-day-vulnerabilities-in-live-streaming-cameras-with-the-help-of-ai

Impacted products

Vendor

Product

Version

▼

PTZOptics

PT12X-SE-xx-G3

Version: 0 < 9.1.43

PTZOptics	PT12X-LINK-4K-xx	Version: 0 < 0.0.63
PTZOptics	PT20X-SE-xx-G3	Version: 0 < 9.1.32
PTZOptics	PT20X-LINK-4K-xx	Version: 0 < 0.0.89
PTZOptics	PT30X-SE-xx-G3	Version: 0 < 9.1.33
PTZOptics	PT30X-LINK-4K-xx	Version: 0 < 2.0.71
PTZOptics	PT-STUDIOPRO	Version: 0 < 9.0.41
PTZOptics	PT12X-STUDIO-4K-xx-G3	Version: 0 < 8.1.90
PTZOptics	PT20X-STUDIO-4K-xx-G3	Version: 0 < 8.1.90
PTZOptics	PT12X-SDI/NDI-xx	Version: 0 < 6.3.70
PTZOptics	PT12X-USB-xx	Version: 0 < 6.2.88
PTZOptics	PT20X-SDI/NDI-xx	Version: 0 < 6.3.27
SMTAV	Pan-Tilt-Zoom Cameras	Version: *
PTZOptics	PT30X-SDI/NDI-xx	Version: 0 < 6.3.43
multiCAM Systems	Pan-Tilt-Zoom Cameras	Version: *
PTZOptics	VL Fixed Camera/NDI Fixed Camera	Version: 0 < 7.2.94
PTZOptics	12x Fixed Camera/NDI Fixed Camera	Version: 0 < 7.2.85
PTZOptics	20x Fixed Camera/NDI Fixed Camera	Version: 0 < 7.2.94
PTZOptics	EPTZ Fixed Camera/NDI Fixed Camera	Version: 0 < 8.1.89
PTZOptics	HC-EPTZ-NDI	Version: 0 < 8.2.14
PTZOptics	PT12X-4K-xx-G3	Version: 0 < 0.0.58
PTZOptics	PT20X-4K-xx-G3	Version: 0 < 0.0.85
PTZOptics	PT30X-4K-xx-G3	Version: 0 < 2.0.64
PTZOptics	PT20X-USB-xx	Version: 0 < 6.2.81
ValueHD	Pan-Tilt-Zoom Cameras	Version: *

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-35452",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-09-08T18:05:20.509951Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-09-08T18:07:29.985Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "PT12X-SE-xx-G3",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "9.1.43",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "9.1.43"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "PT12X-LINK-4K-xx",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "0.0.63",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "0.0.63"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "PT20X-SE-xx-G3",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "9.1.32",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "9.1.32"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "PT20X-LINK-4K-xx",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "0.0.89",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "0.0.89"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "PT30X-SE-xx-G3",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "9.1.33",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "9.1.33"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "PT30X-LINK-4K-xx",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "2.0.71",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "2.0.71"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "PT-STUDIOPRO",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "9.0.41",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "9.0.41"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "PT12X-STUDIO-4K-xx-G3",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "8.1.90",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "8.1.90"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "PT20X-STUDIO-4K-xx-G3",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "8.1.90",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "8.1.90"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "PT12X-SDI/NDI-xx",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "6.3.70",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "6.3.70"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "PT12X-USB-xx",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "6.2.88",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "6.2.88"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "PT20X-SDI/NDI-xx",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "6.3.27",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "6.3.27"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "Pan-Tilt-Zoom Cameras",
          "vendor": "SMTAV",
          "versions": [
            {
              "status": "affected",
              "version": "*"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "PT30X-SDI/NDI-xx",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "6.3.43",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "6.3.43"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "Pan-Tilt-Zoom Cameras",
          "vendor": "multiCAM Systems",
          "versions": [
            {
              "status": "affected",
              "version": "*"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "VL Fixed Camera/NDI Fixed Camera",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "7.2.94",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "7.2.94"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "12x Fixed Camera/NDI Fixed Camera",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "7.2.85",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "7.2.85"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "20x Fixed Camera/NDI Fixed Camera",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "7.2.94",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "7.2.94"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "EPTZ Fixed Camera/NDI Fixed Camera",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "8.1.89",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "8.1.89"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "HC-EPTZ-NDI",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "8.2.14",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "8.2.14"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "PT12X-4K-xx-G3",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "0.0.58",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "0.0.58"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "PT20X-4K-xx-G3",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "0.0.85",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "0.0.85"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "PT30X-4K-xx-G3",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "2.0.64",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "2.0.64"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "PT20X-USB-xx",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "6.2.81",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "6.2.81"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "Pan-Tilt-Zoom Cameras",
          "vendor": "ValueHD",
          "versions": [
            {
              "status": "affected",
              "version": "*"
            }
          ]
        }
      ],
      "datePublic": "2025-06-12T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "PTZOptics and possibly other ValueHD-based pan-tilt-zoom cameras use default, shared credentials for the administrative web interface."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        },
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 9.2,
            "baseSeverity": "CRITICAL",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH"
          }
        },
        {
          "other": {
            "content": {
              "id": "CVE-2025-35452",
              "options": [
                {
                  "Exploitation": "none"
                },
                {
                  "Automatable": "yes"
                },
                {
                  "Technical Impact": "total"
                }
              ],
              "role": "CISA Coordinator",
              "timestamp": "2025-09-08T17:57:32.559307Z",
              "version": "2.0.3"
            },
            "type": "ssvc"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-798",
              "description": "CWE-798 Use of Hard-coded Credentials",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-1392",
              "description": "CWE-1392 Use of Default Credentials",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-09-08T17:58:30.782Z",
        "orgId": "9119a7d8-5eab-497f-8521-727c672e3725",
        "shortName": "cisa-cg"
      },
      "references": [
        {
          "name": "url",
          "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-10"
        },
        {
          "name": "url",
          "url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-162-10.json"
        },
        {
          "name": "url",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-35452"
        },
        {
          "name": "url",
          "url": "https://www.labs.greynoise.io/grimoire/2024-10-31-sift-0-day-rce/"
        },
        {
          "name": "url",
          "url": "https://www.greynoise.io/blog/greynoise-intelligence-discovers-zero-day-vulnerabilities-in-live-streaming-cameras-with-the-help-of-ai"
        }
      ],
      "title": "Pan-Tilt-Zoom cameras default administrative credentials for web interface"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9119a7d8-5eab-497f-8521-727c672e3725",
    "assignerShortName": "cisa-cg",
    "cveId": "CVE-2025-35452",
    "datePublished": "2025-09-05T17:49:02.755Z",
    "dateReserved": "2025-04-15T20:57:14.282Z",
    "dateUpdated": "2025-09-08T18:07:29.985Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-8956 (GCVE-0-2024-8956)

Vulnerability from cvelistv5

Published

2024-09-17 19:59

Modified

2025-09-08 18:19

Severity ?

9.1 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE

CWE-287 - Improper Authentication

Summary

PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an insufficient authentication issue. The camera does not properly enforce authentication to /cgi-bin/param.cgi when requests are sent without an HTTP Authorization header. The result is a remote and unauthenticated attacker can leak sensitive data such as usernames, password hashes, and configurations details. Additionally, the attacker can update individual configuration values or overwrite the whole file.

References

▼	URL	Tags
	https://ptzoptics.com/firmware-changelog/	vendor-advisory
	https://vulncheck.com/advisories/ptzoptics-insufficient-auth	third-party-advisory

Impacted products

Vendor

Product

Version

▼

Version: 0 ≤

Version: 0 ≤

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:o:ptzoptics:pt30x-sdi_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pt30x-sdi_firmware",
            "vendor": "ptzoptics",
            "versions": [
              {
                "lessThan": "6.3.40",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:ptzoptics:pt30x-ndi-xx-g2_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pt30x-ndi-xx-g2_firmware",
            "vendor": "ptzoptics",
            "versions": [
              {
                "lessThan": "6.3.40",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-8956",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-09-08T18:14:56.296063Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2024-11-04",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-8956"
              },
              "type": "kev"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-09-08T18:19:21.494Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "technical-description",
              "third-party-advisory",
              "exploit"
            ],
            "url": "https://www.labs.greynoise.io/grimoire/2024-10-31-sift-0-day-rce/"
          },
          {
            "tags": [
              "third-party-advisory"
            ],
            "url": "https://www.greynoise.io/blog/greynoise-intelligence-discovers-zero-day-vulnerabilities-in-live-streaming-cameras-with-the-help-of-ai"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "PT30X-SDI",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "6.3.40",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "PT30X-NDI",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "6.3.40",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Konstantin Lazarev of GreyNoise"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an insufficient authentication issue. The camera does not properly enforce authentication to /cgi-bin/param.cgi when requests are sent without an HTTP Authorization header. The result is a remote and unauthenticated attacker can leak sensitive data such as usernames, password hashes, and configurations details. Additionally, the attacker can update individual configuration values or overwrite the whole file.\u003cbr\u003e"
            }
          ],
          "value": "PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an insufficient authentication issue. The camera does not properly enforce authentication to /cgi-bin/param.cgi when requests are sent without an HTTP Authorization header. The result is a remote and unauthenticated attacker can leak sensitive data such as usernames, password hashes, and configurations details. Additionally, the attacker can update individual configuration values or overwrite the whole file."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-114",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-114 Authentication Abuse"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-287",
              "description": "CWE-287 Improper Authentication",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-09-17T20:02:11.772Z",
        "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
        "shortName": "VulnCheck"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://ptzoptics.com/firmware-changelog/"
        },
        {
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vulncheck.com/advisories/ptzoptics-insufficient-auth"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "tags": [
        "x_known-exploited-vulnerability"
      ],
      "title": "PTZOptics NDI and SDI Cameras /cgi-bin/param.cgi Insufficient Authentication",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
    "assignerShortName": "VulnCheck",
    "cveId": "CVE-2024-8956",
    "datePublished": "2024-09-17T19:59:27.205Z",
    "dateReserved": "2024-09-17T19:08:47.005Z",
    "dateUpdated": "2025-09-08T18:19:21.494Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

icsa-25-162-10

Vulnerability from csaf_cisa

CVE-2024-8957 (GCVE-0-2024-8957)

Vulnerability from cvelistv5

CVE-2025-35451 (GCVE-0-2025-35451)

Vulnerability from cvelistv5

CVE-2025-35452 (GCVE-0-2025-35452)

Vulnerability from cvelistv5

CVE-2024-8956 (GCVE-0-2024-8956)

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature