Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2025-35451

Pan-Tilt-Zoom cameras hard-coded default passwords with SSH and telnet enabled

PTZOptics and possibly other ValueHD-based pan-tilt-zoom cameras use hard-coded, default administrative credentials. The passwords can readily be cracked. Many cameras have SSH or telnet listening on all interfaces. The passwords cannot be changed by the user, nor can the SSH or telnet service be disabled by the user.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Multicam-systems Ptzoptics Smtav and 1 more
Products
Mcamii Ptz Mcamii Ptz Firmware Ndi Fixed Camera and 99 more
CVE-2024-8957

PTZOptics NDI and SDI Cameras Command Injection via NTP Address Configuration

PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an OS command injection issue. The camera does not sufficiently validate the ntp_addr configuration value which may lead to arbitrary command execution when ntp_client is started. When chained with CVE-2024-8956, a remote and unauthenticated attacker can execute arbitrary OS commands on affected devices.

CVSS 3.1 · 7.2 High EPSS 79.8% KEV · Listed
Vendors
Ptzoptics
Products
Pt30x-ndi-xx-g2 Pt30x-ndi-xx-g2 Firmware Pt30x-ndi Firmware and 2 more
CVE-2024-8956

PTZOptics NDI and SDI Cameras /cgi-bin/param.cgi Insufficient Authentication

PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an insufficient authentication issue. The camera does not properly enforce authentication to /cgi-bin/param.cgi when requests are sent without an HTTP Authorization header. The result is a remote and unauthenticated attacker can leak sensitive data such as usernames, password hashes, and configurations details. Additionally, the attacker can update individual configuration values or overwrite the whole file.

CVSS 3.1 · 9.1 Critical EPSS 58.8% KEV · Listed
Vendors
Ptzoptics
Products
Pt30x-ndi-xx-g2 Pt30x-ndi-xx-g2 Firmware Pt30x-sdi and 1 more