5 resultados
9.1Crítica
CVE-2026-75969

PTZOptics Missing Authentication in Firmware Upload

PTZOptics Move 4K 12X; PTZOptics Move 4K 20X; PTZOptics Move 4K 30X; PTZOptics Link 4K 12X

Missing authentication for critical function vulnerability for all PTZOptics cameras and the Firmware Upgrade Tool - Firmware Update modules. A missing authentication vulnerability in the firmware update mechanism of affected PTZOptics cameras allows an unaut…

9.8Crítica
CVE-2025-35451

Pan-Tilt-Zoom cameras hard-coded default passwords with SSH and telnet enabled

PTZOptics PT12X-SE-xx-G3; PTZOptics PT12X-LINK-4K-xx; PTZOptics PT20X-SE-xx-G3; PTZOptics PT20X-LINK-4K-xx

PTZOptics and possibly other ValueHD-based pan-tilt-zoom cameras use hard-coded, default administrative credentials. The passwords can readily be cracked. Many cameras have SSH or telnet listening on all interfaces. The passwords cannot be changed by the user…

7.2Alta
CVE-2024-8957 KEV

PTZOptics NDI and SDI Cameras Command Injection via NTP Address Configuration

PTZOptics PT30X-SDI; PTZOptics PT30X-NDI; ptzoptics pt30x-sdi_firmware; ptzoptics pt30x-ndi_firmware

PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an OS command injection issue. The camera does not sufficiently validate the ntp_addr configuration value which may lead to arbitrary command execution when ntp_client is started. When chained…

80%EPSS
9.1Crítica
CVE-2024-8956 KEV

PTZOptics NDI and SDI Cameras /cgi-bin/param.cgi Insufficient Authentication

PTZOptics PT30X-SDI; PTZOptics PT30X-NDI; ptzoptics pt30x-sdi_firmware; ptzoptics pt30x-ndi-xx-g2_firmware

PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an insufficient authentication issue. The camera does not properly enforce authentication to /cgi-bin/param.cgi when requests are sent without an HTTP Authorization header. The result is a rem…

59%EPSS