Skip to content
OpenAdvisories

Vendor

PTZOptics

5 known vulnerabilities.

Products

PT30X-SDI 2 PT30X-NDI 2 PT12X-SE-xx-G3 2 PT12X-LINK-4K-xx 2 PT20X-SE-xx-G3 2 PT20X-LINK-4K-xx 2 PT30X-SE-xx-G3 2 PT30X-LINK-4K-xx 2 PT-STUDIOPRO 2 PT12X-STUDIO-4K-xx-G3 2 PT20X-STUDIO-4K-xx-G3 2 PT12X-SDI/NDI-xx 2 PT12X-USB-xx 2 PT20X-SDI/NDI-xx 2 PT30X-SDI/NDI-xx 2 VL Fixed Camera/NDI Fixed Camera 2 12x Fixed Camera/NDI Fixed Camera 2 20x Fixed Camera/NDI Fixed Camera 2 EPTZ Fixed Camera/NDI Fixed Camera 2 HC-EPTZ-NDI 2 PT12X-4K-xx-G3 2 PT20X-4K-xx-G3 2 PT30X-4K-xx-G3 2 PT20X-USB-xx 2 Move 4K 12X 1 Move 4K 20X 1 Move 4K 30X 1 Link 4K 12X 1 Link 4K 20X 1 Link 4K 30X 1 Move SE 12X 1 Move SE 20X 1 Move SE 30X 1 Studio 4K 12X 1 Studio 4K 20X 1 Studio SE 12X 1 Studio SE 20X 1 PT12X-SDI-GY-G2, PT12X-SDI-WH-G2, PT12X-NDI-GY-G2, PT12X-NDI-WH-G2 1 PT12X-USB-GY-G2, PT12X-USB-WH-G2 1 PT20X-SDI-GY-G2, PT20X-SDI-WH-G2, PT20X-NDI-GY-G2, PT20X-NDI-WH-G2 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.1
    CVE-2026-75969

    PTZOptics Missing Authentication in Firmware Upload

    Missing authentication for critical function vulnerability for all PTZOptics cameras and the Firmware Upgrade Tool - Firmware Update modules. A missing authentication vulnerability in the firmware update mechanism of affected PTZOptics cameras allows an unaut…

    PTZOptics PT12X-SDI-GY-G2, PT12X-SDI-WH-G2, PT12X-NDI-GY-G2, PT12X-NDI-WH-G2 Move SE 12X Studio Pro
  • Critical 9.8
    CVE-2025-35452

    Pan-Tilt-Zoom cameras default administrative credentials for web interface

    PTZOptics and possibly other ValueHD-based pan-tilt-zoom cameras use default, shared credentials for the administrative web interface.

    PTZOptics multiCAM Systems ValueHD SMTAV
  • Critical 9.8
    CVE-2025-35451

    Pan-Tilt-Zoom cameras hard-coded default passwords with SSH and telnet enabled

    PTZOptics and possibly other ValueHD-based pan-tilt-zoom cameras use hard-coded, default administrative credentials. The passwords can readily be cracked. Many cameras have SSH or telnet listening on all interfaces. The passwords cannot be changed by the user…

    PTZOptics multiCAM Systems ValueHD SMTAV
  • Critical 9.1
    CVE-2024-8956 Exploited EPSS 59%

    PTZOptics NDI and SDI Cameras /cgi-bin/param.cgi Insufficient Authentication

    PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an insufficient authentication issue. The camera does not properly enforce authentication to /cgi-bin/param.cgi when requests are sent without an HTTP Authorization header. The result is a rem…

    PTZOptics PT30X-SDI PT30X-NDI
    KEV Nov 4, 2024