Skip to content
OpenAdvisories

Vendor

PTZOptics

5 known vulnerabilities.

PTZOptics at a glance

Last 12 months
1
Critical · all time
4
Exploited · all time
2
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 1 1 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 1 vulnerability, 1 critical Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202611
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202522
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

5 results · Feed

  • Critical 9.1

    PTZOptics Missing Authentication in Firmware Upload

    Missing authentication for critical function vulnerability for all PTZOptics cameras and the Firmware Upgrade Tool - Firmware Update modules. A missing authentication vulnerability in the firmware update mechanism of affected PTZOptics cameras allows an unaut…

  • Critical 9.8

    Pan-Tilt-Zoom cameras default administrative credentials for web interface

    PTZOptics and possibly other ValueHD-based pan-tilt-zoom cameras use default, shared credentials for the administrative web interface.

  • Critical 9.8

    Pan-Tilt-Zoom cameras hard-coded default passwords with SSH and telnet enabled

    PTZOptics and possibly other ValueHD-based pan-tilt-zoom cameras use hard-coded, default administrative credentials. The passwords can readily be cracked. Many cameras have SSH or telnet listening on all interfaces. The passwords cannot be changed by the user…

  • High 7.2
    CVE-2024-8957 Exploited EPSS 80%

    PTZOptics NDI and SDI Cameras Command Injection via NTP Address Configuration

    PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an OS command injection issue. The camera does not sufficiently validate the ntp_addr configuration value which may lead to arbitrary command execution when ntp_client is started. When chained…

    KEV Nov 4, 2024
  • Critical 9.1
    CVE-2024-8956 Exploited EPSS 59%

    PTZOptics NDI and SDI Cameras /cgi-bin/param.cgi Insufficient Authentication

    PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an insufficient authentication issue. The camera does not properly enforce authentication to /cgi-bin/param.cgi when requests are sent without an HTTP Authorization header. The result is a rem…

    KEV Nov 4, 2024