Skip to content
OpenAdvisories

Vendor

PTZOptics

5 known vulnerabilities.

2 results · Clear filters · Feed

  • High 7.2
    CVE-2024-8957 Exploited EPSS 80%

    PTZOptics NDI and SDI Cameras Command Injection via NTP Address Configuration

    PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an OS command injection issue. The camera does not sufficiently validate the ntp_addr configuration value which may lead to arbitrary command execution when ntp_client is started. When chained…

    KEV Nov 4, 2024
  • Critical 9.1
    CVE-2024-8956 Exploited EPSS 59%

    PTZOptics NDI and SDI Cameras /cgi-bin/param.cgi Insufficient Authentication

    PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an insufficient authentication issue. The camera does not properly enforce authentication to /cgi-bin/param.cgi when requests are sent without an HTTP Authorization header. The result is a rem…

    KEV Nov 4, 2024