cvelistv5 - CVE-2025-35451

CVE-2025-35451 (GCVE-0-2025-35451)

Vulnerability from cvelistv5 – Published: 2025-09-05 17:43 – Updated: 2025-09-08 18:08

Title

Pan-Tilt-Zoom cameras hard-coded default passwords with SSH and telnet enabled

Summary

PTZOptics and possibly other ValueHD-based pan-tilt-zoom cameras use hard-coded, default administrative credentials. The passwords can readily be cracked. Many cameras have SSH or telnet listening on all interfaces. The passwords cannot be changed by the user, nor can the SSH or telnet service be disabled by the user.

Severity ?

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.3 (Critical)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CWE

CWE-798 - Use of Hard-coded Credentials

Assigner

cisa-cg

References

URL

Tags

	https://www.cisa.gov/news-events/ics-advisories/i…
	https://github.com/cisagov/CSAF/blob/develop/csaf…
	https://www.cve.org/CVERecord?id=CVE-2025-35451
	https://www.labs.greynoise.io/grimoire/2024-10-31…
	https://www.greynoise.io/blog/greynoise-intellige…

Impacted products

Vendor

Product

Version

PTZOptics

PT12X-SE-xx-G3

Affected: 0 , < 9.1.43 (custom)
Unaffected: 9.1.43

PTZOptics	PT12X-LINK-4K-xx	Affected: 0 , < 0.0.63 (custom) Unaffected: 0.0.63
PTZOptics	PT20X-SE-xx-G3	Affected: 0 , < 9.1.32 (custom) Unaffected: 9.1.32
PTZOptics	PT20X-LINK-4K-xx	Affected: 0 , < 0.0.89 (custom) Unaffected: 0.0.89
PTZOptics	PT-STUDIOPRO	Affected: 0 , < 9.0.41 (custom) Unaffected: 9.0.41
PTZOptics	PT30X-SE-xx-G3	Affected: 0 , < 9.1.33 (custom) Unaffected: 9.1.33
PTZOptics	PT30X-LINK-4K-xx	Affected: 0 , < 2.0.71 (custom) Unaffected: 2.0.71
PTZOptics	PT12X-STUDIO-4K-xx-G3	Affected: 0 , < 8.1.90 (custom) Unaffected: 8.1.90
PTZOptics	PT20X-STUDIO-4K-xx-G3	Affected: 0 , < 8.1.90 (custom) Unaffected: 8.1.90
PTZOptics	PT12X-SDI/NDI-xx	Affected: 0 , < 6.3.70 (custom) Unaffected: 6.3.70
PTZOptics	PT12X-USB-xx	Affected: 0 , < 6.2.88 (custom) Unaffected: 6.2.88
PTZOptics	PT20X-SDI/NDI-xx	Affected: 0 , < 6.3.27 (custom) Unaffected: 6.3.27
SMTAV	Pan-Tilt-Zoom Cameras	Affected: *
PTZOptics	PT30X-SDI/NDI-xx	Affected: 0 , < 6.3.43 (custom) Unaffected: 6.3.43
multiCAM Systems	Pan-Tilt-Zoom Cameras	Affected: *
PTZOptics	VL Fixed Camera/NDI Fixed Camera	Affected: 0 , < 7.2.94 (custom) Unaffected: 7.2.94
PTZOptics	12x Fixed Camera/NDI Fixed Camera	Affected: 0 , < 7.2.85 (custom) Unaffected: 7.2.85
PTZOptics	20x Fixed Camera/NDI Fixed Camera	Affected: 0 , < 7.2.94 (custom) Unaffected: 7.2.94
PTZOptics	EPTZ Fixed Camera/NDI Fixed Camera	Affected: 0 , < 8.1.89 (custom) Unaffected: 8.1.89
PTZOptics	HC-EPTZ-NDI	Affected: 0 , < 8.2.14 (custom) Unaffected: 8.2.14
PTZOptics	PT12X-4K-xx-G3	Affected: 0 , < 0.0.58 (custom) Unaffected: 0.0.58
PTZOptics	PT20X-4K-xx-G3	Affected: 0 , < 0.0.85 (custom) Unaffected: 0.0.85
PTZOptics	PT20X-USB-xx	Affected: 0 , < 6.2.81 (custom) Unaffected: 6.2.81
PTZOptics	PT30X-4K-xx-G3	Affected: 0 , < 2.0.64 (custom) Unaffected: 2.0.64
ValueHD	Pan-Tilt-Zoom Cameras	Affected: *

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-35451",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-09-08T18:08:16.124259Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-09-08T18:08:29.882Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "PT12X-SE-xx-G3",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "9.1.43",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "9.1.43"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "PT12X-LINK-4K-xx",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "0.0.63",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "0.0.63"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "PT20X-SE-xx-G3",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "9.1.32",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "9.1.32"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "PT20X-LINK-4K-xx",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "0.0.89",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "0.0.89"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "PT-STUDIOPRO",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "9.0.41",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "9.0.41"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "PT30X-SE-xx-G3",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "9.1.33",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "9.1.33"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "PT30X-LINK-4K-xx",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "2.0.71",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "2.0.71"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "PT12X-STUDIO-4K-xx-G3",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "8.1.90",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "8.1.90"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "PT20X-STUDIO-4K-xx-G3",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "8.1.90",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "8.1.90"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "PT12X-SDI/NDI-xx",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "6.3.70",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "6.3.70"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "PT12X-USB-xx",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "6.2.88",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "6.2.88"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "PT20X-SDI/NDI-xx",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "6.3.27",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "6.3.27"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "Pan-Tilt-Zoom Cameras",
          "vendor": "SMTAV",
          "versions": [
            {
              "status": "affected",
              "version": "*"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "PT30X-SDI/NDI-xx",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "6.3.43",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "6.3.43"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "Pan-Tilt-Zoom Cameras",
          "vendor": "multiCAM Systems",
          "versions": [
            {
              "status": "affected",
              "version": "*"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "VL Fixed Camera/NDI Fixed Camera",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "7.2.94",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "7.2.94"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "12x Fixed Camera/NDI Fixed Camera",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "7.2.85",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "7.2.85"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "20x Fixed Camera/NDI Fixed Camera",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "7.2.94",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "7.2.94"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "EPTZ Fixed Camera/NDI Fixed Camera",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "8.1.89",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "8.1.89"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "HC-EPTZ-NDI",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "8.2.14",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "8.2.14"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "PT12X-4K-xx-G3",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "0.0.58",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "0.0.58"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "PT20X-4K-xx-G3",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "0.0.85",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "0.0.85"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "PT20X-USB-xx",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "6.2.81",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "6.2.81"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "PT30X-4K-xx-G3",
          "vendor": "PTZOptics",
          "versions": [
            {
              "lessThan": "2.0.64",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "2.0.64"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "Pan-Tilt-Zoom Cameras",
          "vendor": "ValueHD",
          "versions": [
            {
              "status": "affected",
              "version": "*"
            }
          ]
        }
      ],
      "datePublic": "2025-06-12T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "PTZOptics and possibly other ValueHD-based pan-tilt-zoom cameras use hard-coded, default administrative credentials. The passwords can readily be cracked. Many cameras have SSH or telnet listening on all interfaces. The passwords cannot be changed by the user, nor can the SSH or telnet service be disabled by the user."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        },
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 9.3,
            "baseSeverity": "CRITICAL",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH"
          }
        },
        {
          "other": {
            "content": {
              "id": "CVE-2025-35451",
              "options": [
                {
                  "Exploitation": "none"
                },
                {
                  "Automatable": "yes"
                },
                {
                  "Technical Impact": "total"
                }
              ],
              "role": "CISA Coordinator",
              "timestamp": "2025-09-08T17:57:46.995811Z",
              "version": "2.0.3"
            },
            "type": "ssvc"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-798",
              "description": "CWE-798 Use of Hard-coded Credentials",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-09-08T17:58:14.754Z",
        "orgId": "9119a7d8-5eab-497f-8521-727c672e3725",
        "shortName": "cisa-cg"
      },
      "references": [
        {
          "name": "url",
          "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-10"
        },
        {
          "name": "url",
          "url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-162-10.json"
        },
        {
          "name": "url",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-35451"
        },
        {
          "name": "url",
          "url": "https://www.labs.greynoise.io/grimoire/2024-10-31-sift-0-day-rce/"
        },
        {
          "name": "url",
          "url": "https://www.greynoise.io/blog/greynoise-intelligence-discovers-zero-day-vulnerabilities-in-live-streaming-cameras-with-the-help-of-ai"
        }
      ],
      "title": "Pan-Tilt-Zoom cameras hard-coded default passwords with SSH and telnet enabled"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9119a7d8-5eab-497f-8521-727c672e3725",
    "assignerShortName": "cisa-cg",
    "cveId": "CVE-2025-35451",
    "datePublished": "2025-09-05T17:43:53.108Z",
    "dateReserved": "2025-04-15T20:57:14.282Z",
    "dateUpdated": "2025-09-08T18:08:29.882Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2025-35451\",\"sourceIdentifier\":\"9119a7d8-5eab-497f-8521-727c672e3725\",\"published\":\"2025-09-05T18:15:41.900\",\"lastModified\":\"2025-09-08T16:25:59.157\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"PTZOptics and possibly other ValueHD-based pan-tilt-zoom cameras use hard-coded, default administrative credentials. The passwords can readily be cracked. Many cameras have SSH or telnet listening on all interfaces. The passwords cannot be changed by the user, nor can the SSH or telnet service be disabled by the user.\"}],\"metrics\":{\"cvssMetricV40\":[{\"source\":\"9119a7d8-5eab-497f-8521-727c672e3725\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"4.0\",\"vectorString\":\"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X\",\"baseScore\":9.3,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"NONE\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"vulnConfidentialityImpact\":\"HIGH\",\"vulnIntegrityImpact\":\"HIGH\",\"vulnAvailabilityImpact\":\"HIGH\",\"subConfidentialityImpact\":\"NONE\",\"subIntegrityImpact\":\"NONE\",\"subAvailabilityImpact\":\"NONE\",\"exploitMaturity\":\"NOT_DEFINED\",\"confidentialityRequirement\":\"NOT_DEFINED\",\"integrityRequirement\":\"NOT_DEFINED\",\"availabilityRequirement\":\"NOT_DEFINED\",\"modifiedAttackVector\":\"NOT_DEFINED\",\"modifiedAttackComplexity\":\"NOT_DEFINED\",\"modifiedAttackRequirements\":\"NOT_DEFINED\",\"modifiedPrivilegesRequired\":\"NOT_DEFINED\",\"modifiedUserInteraction\":\"NOT_DEFINED\",\"modifiedVulnConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedVulnIntegrityImpact\":\"NOT_DEFINED\",\"modifiedVulnAvailabilityImpact\":\"NOT_DEFINED\",\"modifiedSubConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedSubIntegrityImpact\":\"NOT_DEFINED\",\"modifiedSubAvailabilityImpact\":\"NOT_DEFINED\",\"Safety\":\"NOT_DEFINED\",\"Automatable\":\"NOT_DEFINED\",\"Recovery\":\"NOT_DEFINED\",\"valueDensity\":\"NOT_DEFINED\",\"vulnerabilityResponseEffort\":\"NOT_DEFINED\",\"providerUrgency\":\"NOT_DEFINED\"}}],\"cvssMetricV31\":[{\"source\":\"9119a7d8-5eab-497f-8521-727c672e3725\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":5.9}]},\"weaknesses\":[{\"source\":\"9119a7d8-5eab-497f-8521-727c672e3725\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-798\"}]}],\"references\":[{\"url\":\"https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-162-10.json\",\"source\":\"9119a7d8-5eab-497f-8521-727c672e3725\"},{\"url\":\"https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-10\",\"source\":\"9119a7d8-5eab-497f-8521-727c672e3725\"},{\"url\":\"https://www.cve.org/CVERecord?id=CVE-2025-35451\",\"source\":\"9119a7d8-5eab-497f-8521-727c672e3725\"},{\"url\":\"https://www.greynoise.io/blog/greynoise-intelligence-discovers-zero-day-vulnerabilities-in-live-streaming-cameras-with-the-help-of-ai\",\"source\":\"9119a7d8-5eab-497f-8521-727c672e3725\"},{\"url\":\"https://www.labs.greynoise.io/grimoire/2024-10-31-sift-0-day-rce/\",\"source\":\"9119a7d8-5eab-497f-8521-727c672e3725\"}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2025-35451\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-09-08T18:08:16.124259Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-09-08T18:08:26.210Z\"}}], \"cna\": {\"title\": \"Pan-Tilt-Zoom cameras hard-coded default passwords with SSH and telnet enabled\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 9.8, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"CRITICAL\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}}, {\"cvssV4_0\": {\"version\": \"4.0\", \"baseScore\": 9.3, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"CRITICAL\", \"vectorString\": \"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"attackRequirements\": \"NONE\", \"privilegesRequired\": \"NONE\", \"subIntegrityImpact\": \"NONE\", \"vulnIntegrityImpact\": \"HIGH\", \"subAvailabilityImpact\": \"NONE\", \"vulnAvailabilityImpact\": \"HIGH\", \"subConfidentialityImpact\": \"NONE\", \"vulnConfidentialityImpact\": \"HIGH\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2025-35451\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-09-08T17:57:46.995811Z\"}}}], \"affected\": [{\"vendor\": \"PTZOptics\", \"product\": \"PT12X-SE-xx-G3\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"9.1.43\", \"versionType\": \"custom\"}, {\"status\": \"unaffected\", \"version\": \"9.1.43\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"PTZOptics\", \"product\": \"PT12X-LINK-4K-xx\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"0.0.63\", \"versionType\": \"custom\"}, {\"status\": \"unaffected\", \"version\": \"0.0.63\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"PTZOptics\", \"product\": \"PT20X-SE-xx-G3\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"9.1.32\", \"versionType\": \"custom\"}, {\"status\": \"unaffected\", \"version\": \"9.1.32\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"PTZOptics\", \"product\": \"PT20X-LINK-4K-xx\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"0.0.89\", \"versionType\": \"custom\"}, {\"status\": \"unaffected\", \"version\": \"0.0.89\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"PTZOptics\", \"product\": \"PT-STUDIOPRO\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"9.0.41\", \"versionType\": \"custom\"}, {\"status\": \"unaffected\", \"version\": \"9.0.41\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"PTZOptics\", \"product\": \"PT30X-SE-xx-G3\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"9.1.33\", \"versionType\": \"custom\"}, {\"status\": \"unaffected\", \"version\": \"9.1.33\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"PTZOptics\", \"product\": \"PT30X-LINK-4K-xx\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"2.0.71\", \"versionType\": \"custom\"}, {\"status\": \"unaffected\", \"version\": \"2.0.71\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"PTZOptics\", \"product\": \"PT12X-STUDIO-4K-xx-G3\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"8.1.90\", \"versionType\": \"custom\"}, {\"status\": \"unaffected\", \"version\": \"8.1.90\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"PTZOptics\", \"product\": \"PT20X-STUDIO-4K-xx-G3\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"8.1.90\", \"versionType\": \"custom\"}, {\"status\": \"unaffected\", \"version\": \"8.1.90\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"PTZOptics\", \"product\": \"PT12X-SDI/NDI-xx\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"6.3.70\", \"versionType\": \"custom\"}, {\"status\": \"unaffected\", \"version\": \"6.3.70\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"PTZOptics\", \"product\": \"PT12X-USB-xx\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"6.2.88\", \"versionType\": \"custom\"}, {\"status\": \"unaffected\", \"version\": \"6.2.88\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"PTZOptics\", \"product\": \"PT20X-SDI/NDI-xx\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"6.3.27\", \"versionType\": \"custom\"}, {\"status\": \"unaffected\", \"version\": \"6.3.27\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"SMTAV\", \"product\": \"Pan-Tilt-Zoom Cameras\", \"versions\": [{\"status\": \"affected\", \"version\": \"*\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"PTZOptics\", \"product\": \"PT30X-SDI/NDI-xx\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"6.3.43\", \"versionType\": \"custom\"}, {\"status\": \"unaffected\", \"version\": \"6.3.43\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"multiCAM Systems\", \"product\": \"Pan-Tilt-Zoom Cameras\", \"versions\": [{\"status\": \"affected\", \"version\": \"*\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"PTZOptics\", \"product\": \"VL Fixed Camera/NDI Fixed Camera\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"7.2.94\", \"versionType\": \"custom\"}, {\"status\": \"unaffected\", \"version\": \"7.2.94\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"PTZOptics\", \"product\": \"12x Fixed Camera/NDI Fixed Camera\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"7.2.85\", \"versionType\": \"custom\"}, {\"status\": \"unaffected\", \"version\": \"7.2.85\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"PTZOptics\", \"product\": \"20x Fixed Camera/NDI Fixed Camera\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"7.2.94\", \"versionType\": \"custom\"}, {\"status\": \"unaffected\", \"version\": \"7.2.94\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"PTZOptics\", \"product\": \"EPTZ Fixed Camera/NDI Fixed Camera\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"8.1.89\", \"versionType\": \"custom\"}, {\"status\": \"unaffected\", \"version\": \"8.1.89\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"PTZOptics\", \"product\": \"HC-EPTZ-NDI\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"8.2.14\", \"versionType\": \"custom\"}, {\"status\": \"unaffected\", \"version\": \"8.2.14\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"PTZOptics\", \"product\": \"PT12X-4K-xx-G3\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"0.0.58\", \"versionType\": \"custom\"}, {\"status\": \"unaffected\", \"version\": \"0.0.58\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"PTZOptics\", \"product\": \"PT20X-4K-xx-G3\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"0.0.85\", \"versionType\": \"custom\"}, {\"status\": \"unaffected\", \"version\": \"0.0.85\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"PTZOptics\", \"product\": \"PT20X-USB-xx\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"6.2.81\", \"versionType\": \"custom\"}, {\"status\": \"unaffected\", \"version\": \"6.2.81\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"PTZOptics\", \"product\": \"PT30X-4K-xx-G3\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"2.0.64\", \"versionType\": \"custom\"}, {\"status\": \"unaffected\", \"version\": \"2.0.64\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"ValueHD\", \"product\": \"Pan-Tilt-Zoom Cameras\", \"versions\": [{\"status\": \"affected\", \"version\": \"*\"}], \"defaultStatus\": \"unknown\"}], \"datePublic\": \"2025-06-12T00:00:00.000Z\", \"references\": [{\"url\": \"https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-10\", \"name\": \"url\"}, {\"url\": \"https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-162-10.json\", \"name\": \"url\"}, {\"url\": \"https://www.cve.org/CVERecord?id=CVE-2025-35451\", \"name\": \"url\"}, {\"url\": \"https://www.labs.greynoise.io/grimoire/2024-10-31-sift-0-day-rce/\", \"name\": \"url\"}, {\"url\": \"https://www.greynoise.io/blog/greynoise-intelligence-discovers-zero-day-vulnerabilities-in-live-streaming-cameras-with-the-help-of-ai\", \"name\": \"url\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"PTZOptics and possibly other ValueHD-based pan-tilt-zoom cameras use hard-coded, default administrative credentials. The passwords can readily be cracked. Many cameras have SSH or telnet listening on all interfaces. The passwords cannot be changed by the user, nor can the SSH or telnet service be disabled by the user.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-798\", \"description\": \"CWE-798 Use of Hard-coded Credentials\"}]}], \"providerMetadata\": {\"orgId\": \"9119a7d8-5eab-497f-8521-727c672e3725\", \"shortName\": \"cisa-cg\", \"dateUpdated\": \"2025-09-08T17:58:14.754Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2025-35451\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-09-08T18:08:29.882Z\", \"dateReserved\": \"2025-04-15T20:57:14.282Z\", \"assignerOrgId\": \"9119a7d8-5eab-497f-8521-727c672e3725\", \"datePublished\": \"2025-09-05T17:43:53.108Z\", \"assignerShortName\": \"cisa-cg\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}

GHSA-J5FJ-CV29-J569

Vulnerability from github – Published: 2025-09-05 18:31 – Updated: 2025-09-05 21:32

Details

Severity ?

9.8 (Critical)


                  
                    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.3 (Critical)


                  
                    CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2025-35451"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-798"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-09-05T18:15:41Z",
    "severity": "CRITICAL"
  },
  "details": "PTZOptics and possibly other ValueHD-based pan-tilt-zoom cameras use hard-coded, default administrative credentials. The passwords can readily be cracked. Many cameras have SSH or telnet listening on all interfaces. The passwords cannot be changed by the user, nor can the SSH or telnet service be disabled by the user.",
  "id": "GHSA-j5fj-cv29-j569",
  "modified": "2025-09-05T21:32:37Z",
  "published": "2025-09-05T18:31:26Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-35451"
    },
    {
      "type": "WEB",
      "url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-162-10.json"
    },
    {
      "type": "WEB",
      "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-10"
    },
    {
      "type": "WEB",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-35451"
    },
    {
      "type": "WEB",
      "url": "https://www.greynoise.io/blog/greynoise-intelligence-discovers-zero-day-vulnerabilities-in-live-streaming-cameras-with-the-help-of-ai"
    },
    {
      "type": "WEB",
      "url": "https://www.labs.greynoise.io/grimoire/2024-10-31-sift-0-day-rce"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
      "type": "CVSS_V4"
    }
  ]
}

FKIE_CVE-2025-35451

Vulnerability from fkie_nvd - Published: 2025-09-05 18:15 - Updated: 2025-09-08 16:25

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

References

	URL	Tags
	9119a7d8-5eab-497f-8521-727c672e3725	https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-162-10.json
	9119a7d8-5eab-497f-8521-727c672e3725	https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-10
	9119a7d8-5eab-497f-8521-727c672e3725	https://www.cve.org/CVERecord?id=CVE-2025-35451
	9119a7d8-5eab-497f-8521-727c672e3725	https://www.greynoise.io/blog/greynoise-intelligence-discovers-zero-day-vulnerabilities-in-live-streaming-cameras-with-the-help-of-ai
	9119a7d8-5eab-497f-8521-727c672e3725	https://www.labs.greynoise.io/grimoire/2024-10-31-sift-0-day-rce/

Impacted products

	Vendor	Product	Version

JSON

To clipboard

{
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "PTZOptics and possibly other ValueHD-based pan-tilt-zoom cameras use hard-coded, default administrative credentials. The passwords can readily be cracked. Many cameras have SSH or telnet listening on all interfaces. The passwords cannot be changed by the user, nor can the SSH or telnet service be disabled by the user."
    }
  ],
  "id": "CVE-2025-35451",
  "lastModified": "2025-09-08T16:25:59.157",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 9.8,
          "baseSeverity": "CRITICAL",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 5.9,
        "source": "9119a7d8-5eab-497f-8521-727c672e3725",
        "type": "Secondary"
      }
    ],
    "cvssMetricV40": [
      {
        "cvssData": {
          "Automatable": "NOT_DEFINED",
          "Recovery": "NOT_DEFINED",
          "Safety": "NOT_DEFINED",
          "attackComplexity": "LOW",
          "attackRequirements": "NONE",
          "attackVector": "NETWORK",
          "availabilityRequirement": "NOT_DEFINED",
          "baseScore": 9.3,
          "baseSeverity": "CRITICAL",
          "confidentialityRequirement": "NOT_DEFINED",
          "exploitMaturity": "NOT_DEFINED",
          "integrityRequirement": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "privilegesRequired": "NONE",
          "providerUrgency": "NOT_DEFINED",
          "subAvailabilityImpact": "NONE",
          "subConfidentialityImpact": "NONE",
          "subIntegrityImpact": "NONE",
          "userInteraction": "NONE",
          "valueDensity": "NOT_DEFINED",
          "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "version": "4.0",
          "vulnAvailabilityImpact": "HIGH",
          "vulnConfidentialityImpact": "HIGH",
          "vulnIntegrityImpact": "HIGH",
          "vulnerabilityResponseEffort": "NOT_DEFINED"
        },
        "source": "9119a7d8-5eab-497f-8521-727c672e3725",
        "type": "Secondary"
      }
    ]
  },
  "published": "2025-09-05T18:15:41.900",
  "references": [
    {
      "source": "9119a7d8-5eab-497f-8521-727c672e3725",
      "url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-162-10.json"
    },
    {
      "source": "9119a7d8-5eab-497f-8521-727c672e3725",
      "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-10"
    },
    {
      "source": "9119a7d8-5eab-497f-8521-727c672e3725",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-35451"
    },
    {
      "source": "9119a7d8-5eab-497f-8521-727c672e3725",
      "url": "https://www.greynoise.io/blog/greynoise-intelligence-discovers-zero-day-vulnerabilities-in-live-streaming-cameras-with-the-help-of-ai"
    },
    {
      "source": "9119a7d8-5eab-497f-8521-727c672e3725",
      "url": "https://www.labs.greynoise.io/grimoire/2024-10-31-sift-0-day-rce/"
    }
  ],
  "sourceIdentifier": "9119a7d8-5eab-497f-8521-727c672e3725",
  "vulnStatus": "Undergoing Analysis",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-798"
        }
      ],
      "source": "9119a7d8-5eab-497f-8521-727c672e3725",
      "type": "Secondary"
    }
  ]
}

ICSA-25-162-10

Vulnerability from csaf_cisa - Published: 2025-06-12 06:00 - Updated: 2025-06-12 06:00

Summary

PTZOptics and Other Pan-Tilt-Zoom Cameras

Notes

Legal Notice

All information products included in https://us-cert.cisa.gov/ics are provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.

Risk evaluation

Successful exploitation of these vulnerabilities could allow an attacker to leak sensitive data, execute arbitrary commands, and access the admin web interface using hard-coded credentials.

Critical infrastructure sectors

Commercial Facilities, Critical Manufacturing, Government Services and Facilities, Healthcare and Public Health

Countries/areas deployed

Worldwide

Company headquarters location

PTZOptics - United States; multiCAM Systems - United States; ValueHD - China; SMTAV - China

Recommended Practices

CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as:

Recommended Practices

Minimize network exposure for all control system devices and/or systems, ensuring they are not accessible from the internet.

Recommended Practices

Locate control system networks and remote devices behind firewalls and isolating them from business networks.

Recommended Practices

When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs). Recognize VPNs may have vulnerabilities, should be updated to the most recent version available, and are only as secure as the connected devices.

Recommended Practices

CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.

Recommended Practices

CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.

Recommended Practices

CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets.

Recommended Practices

Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.

Recommended Practices

Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.

Recommended Practices

No known public exploitation specifically targeting these vulnerabilities has been reported to CISA at this time.

JSON

To clipboard

{
  "document": {
    "acknowledgments": [
      {
        "names": [
          "an anonymous researcher"
        ],
        "summary": "reporting these vulnerabilities to CISA"
      }
    ],
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Disclosure is not limited",
      "tlp": {
        "label": "WHITE",
        "url": "https://us-cert.cisa.gov/tlp/"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.",
        "title": "Legal Notice"
      },
      {
        "category": "summary",
        "text": "Successful exploitation of these vulnerabilities could allow an attacker to leak sensitive data, execute arbitrary commands, and access the admin web interface using hard-coded credentials. ",
        "title": "Risk evaluation"
      },
      {
        "category": "other",
        "text": "Commercial Facilities, Critical Manufacturing, Government Services and Facilities, Healthcare and Public Health",
        "title": "Critical infrastructure sectors"
      },
      {
        "category": "other",
        "text": "Worldwide",
        "title": "Countries/areas deployed"
      },
      {
        "category": "other",
        "text": "PTZOptics - United States; multiCAM Systems - United States; ValueHD - China; SMTAV - China",
        "title": "Company headquarters location"
      },
      {
        "category": "general",
        "text": "CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as:",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "Minimize network exposure for all control system devices and/or systems, ensuring they are not accessible from the internet.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "Locate control system networks and remote devices behind firewalls and isolating them from business networks.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs). Recognize VPNs may have vulnerabilities, should be updated to the most recent version available, and are only as secure as the connected devices.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "No known public exploitation specifically targeting these vulnerabilities has been reported to CISA at this time.",
        "title": "Recommended Practices"
      }
    ],
    "publisher": {
      "category": "coordinator",
      "contact_details": "central@cisa.dhs.gov",
      "name": "CISA",
      "namespace": "https://www.cisa.gov/"
    },
    "references": [
      {
        "category": "self",
        "summary": "ICS Advisory ICSA-25-162-10 JSON",
        "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2025/icsa-25-162-10.json"
      },
      {
        "category": "self",
        "summary": "ICSA Advisory ICSA-25-162-10 - Web Version",
        "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-10"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/topics/industrial-control-systems"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/uscert/ncas/tips/ST04-014"
      }
    ],
    "title": "PTZOptics and Other Pan-Tilt-Zoom Cameras",
    "tracking": {
      "current_release_date": "2025-06-12T06:00:00.000000Z",
      "generator": {
        "date": "2025-06-12T14:40:48.605025Z",
        "engine": {
          "name": "CISA CSAF Generator",
          "version": "1.0.0"
        }
      },
      "id": "ICSA-25-162-10",
      "initial_release_date": "2025-06-12T06:00:00.000000Z",
      "revision_history": [
        {
          "date": "2025-06-12T06:00:00.000000Z",
          "legacy_version": "Initial",
          "number": "1",
          "summary": "Initial Publication"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c=6.3.34",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV PTZOptics PT12X-SDI-xx-G2: \u003c=6.3.34",
                  "product_id": "CSAFPID-0001"
                }
              }
            ],
            "category": "product_name",
            "name": "PTZOptics PT12X-SDI-xx-G2"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c=6.3.34",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV PTZOptics PT12X-NDI-xx: \u003c=6.3.34",
                  "product_id": "CSAFPID-0002"
                }
              }
            ],
            "category": "product_name",
            "name": "PTZOptics PT12X-NDI-xx"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c=6.2.81",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV PTZOptics PT12X-USB-xx-G2: \u003c=6.2.81",
                  "product_id": "CSAFPID-0003"
                }
              }
            ],
            "category": "product_name",
            "name": "PTZOptics PT12X-USB-xx-G2"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c=6.3.20",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV PTZOptics PT20X-SDI-xx-G2: \u003c=6.3.20",
                  "product_id": "CSAFPID-0004"
                }
              }
            ],
            "category": "product_name",
            "name": "PTZOptics PT20X-SDI-xx-G2"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c=6.3.20",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV PTZOptics PT20X-NDI-xx: \u003c=6.3.20",
                  "product_id": "CSAFPID-0005"
                }
              }
            ],
            "category": "product_name",
            "name": "PTZOptics PT20X-NDI-xx"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c=6.2.73",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV PTZOptics PT20X-USB-xx-G2: \u003c=6.2.73",
                  "product_id": "CSAFPID-0006"
                }
              }
            ],
            "category": "product_name",
            "name": "PTZOptics PT20X-USB-xx-G2"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c=6.3.30",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV PTZOptics PT30X-SDI-xx-G2: \u003c=6.3.30",
                  "product_id": "CSAFPID-0007"
                }
              }
            ],
            "category": "product_name",
            "name": "PTZOptics PT30X-SDI-xx-G2"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c=6.3.30",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV PTZOptics PT30X-NDI-xx: \u003c=6.3.30",
                  "product_id": "CSAFPID-0008"
                }
              }
            ],
            "category": "product_name",
            "name": "PTZOptics PT30X-NDI-xx"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c=7.2.76",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV PTZOptics PT12X-ZCAM: \u003c=7.2.76",
                  "product_id": "CSAFPID-0009"
                }
              }
            ],
            "category": "product_name",
            "name": "PTZOptics PT12X-ZCAM"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c=7.2.82",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV PTZOptics PT20X-ZCAM: \u003c=7.2.82",
                  "product_id": "CSAFPID-0010"
                }
              }
            ],
            "category": "product_name",
            "name": "PTZOptics PT20X-ZCAM"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c=7.2.79",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV PTZOptics PTVL-ZCAM: \u003c=7.2.79",
                  "product_id": "CSAFPID-0011"
                }
              }
            ],
            "category": "product_name",
            "name": "PTZOptics PTVL-ZCAM"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c=8.1.81",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV PTZOptics PTEPTZ-ZCAM-G2: \u003c=8.1.81",
                  "product_id": "CSAFPID-0012"
                }
              }
            ],
            "category": "product_name",
            "name": "PTZOptics PTEPTZ-ZCAM-G2"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c=8.1.81",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV PTZOptics PTEPTZ-NDI-ZCAM-G2: \u003c=8.1.81",
                  "product_id": "CSAFPID-0013"
                }
              }
            ],
            "category": "product_name",
            "name": "PTZOptics PTEPTZ-NDI-ZCAM-G2"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV PTZOptics PT12X-SDI-xx-G2: vers:all/*",
                  "product_id": "CSAFPID-0014"
                }
              }
            ],
            "category": "product_name",
            "name": "PTZOptics PT12X-SDI-xx-G2"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV PTZOptics PT12X-NDI-xx: vers:all/*",
                  "product_id": "CSAFPID-0015"
                }
              }
            ],
            "category": "product_name",
            "name": "PTZOptics PT12X-NDI-xx"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV PTZOptics PT12X-USB-xx-G2: vers:all/*",
                  "product_id": "CSAFPID-0016"
                }
              }
            ],
            "category": "product_name",
            "name": "PTZOptics PT12X-USB-xx-G2"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV PTZOptics PT20X-SDI-xx-G2: vers:all/*",
                  "product_id": "CSAFPID-0017"
                }
              }
            ],
            "category": "product_name",
            "name": "PTZOptics PT20X-SDI-xx-G2"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV PTZOpticsPT20X-NDI-xx: vers:all/*",
                  "product_id": "CSAFPID-0018"
                }
              }
            ],
            "category": "product_name",
            "name": "PTZOpticsPT20X-NDI-xx"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV PTZOptics PT20X-USB-xx-G2: vers:all/*",
                  "product_id": "CSAFPID-0019"
                }
              }
            ],
            "category": "product_name",
            "name": "PTZOptics PT20X-USB-xx-G2"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV PTZOptics PT30X-SDI-xx-G2: vers:all/*",
                  "product_id": "CSAFPID-0020"
                }
              }
            ],
            "category": "product_name",
            "name": "PTZOptics PT30X-SDI-xx-G2"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV PTZOptics PT30X-NDI-xx: vers:all/*",
                  "product_id": "CSAFPID-0021"
                }
              }
            ],
            "category": "product_name",
            "name": "PTZOptics PT30X-NDI-xx"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV PTZOptics PT12X-ZCAM: vers:all/*",
                  "product_id": "CSAFPID-0022"
                }
              }
            ],
            "category": "product_name",
            "name": "PTZOptics PT12X-ZCAM"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV PTZOptics PT20X-ZCAM: vers:all/*",
                  "product_id": "CSAFPID-0023"
                }
              }
            ],
            "category": "product_name",
            "name": "PTZOptics PT20X-ZCAM"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV PTZOptics PTVL-ZCAM: vers:all/*",
                  "product_id": "CSAFPID-0024"
                }
              }
            ],
            "category": "product_name",
            "name": "PTZOptics PTVL-ZCAM"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV PTZOptics PTEPTZ-ZCAM-G2: vers:all/*",
                  "product_id": "CSAFPID-0025"
                }
              }
            ],
            "category": "product_name",
            "name": "PTZOptics PTEPTZ-ZCAM-G2"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c=0.0.58",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV PTZOptics PT12X-4K-xx-G3: \u003c=0.0.58",
                  "product_id": "CSAFPID-0026"
                }
              }
            ],
            "category": "product_name",
            "name": "PTZOptics PT12X-4K-xx-G3"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c=0.0.85",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV PTZOptics PT20X-4K-xx-G3: \u003c=0.0.85",
                  "product_id": "CSAFPID-0027"
                }
              }
            ],
            "category": "product_name",
            "name": "PTZOptics PT20X-4K-xx-G3"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c=2.0.64",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV PTZOptics PT30X-4K-xx-G3: \u003c=2.0.64",
                  "product_id": "CSAFPID-0028"
                }
              }
            ],
            "category": "product_name",
            "name": "PTZOptics PT30X-4K-xx-G3"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c=0.0.63",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV PTZOptics PT12X-LINK-4K-xx: \u003c=0.0.63",
                  "product_id": "CSAFPID-0029"
                }
              }
            ],
            "category": "product_name",
            "name": "PTZOptics PT12X-LINK-4K-xx"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c=0.0.89",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV PTZOptics PT20X-LINK-4K-xx: \u003c=0.0.89",
                  "product_id": "CSAFPID-0030"
                }
              }
            ],
            "category": "product_name",
            "name": "PTZOptics PT20X-LINK-4K-xx"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c=2.0.71",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV PTZOptics PT30X-LINK-4K-xx: \u003c=2.0.71",
                  "product_id": "CSAFPID-0031"
                }
              }
            ],
            "category": "product_name",
            "name": "PTZOptics PT30X-LINK-4K-xx"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c=9.1.43",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV PTZOptics PT12X-SE-xx-G3: \u003c=9.1.43",
                  "product_id": "CSAFPID-0032"
                }
              }
            ],
            "category": "product_name",
            "name": "PTZOptics PT12X-SE-xx-G3"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c=9.1.32",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV PTZOptics PT20X-SE-xx-G3: \u003c=9.1.32",
                  "product_id": "CSAFPID-0033"
                }
              }
            ],
            "category": "product_name",
            "name": "PTZOptics PT20X-SE-xx-G3"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c=9.1.33",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV PTZOptics PT30X-SE-xx-G3: \u003c=9.1.33",
                  "product_id": "CSAFPID-0034"
                }
              }
            ],
            "category": "product_name",
            "name": "PTZOptics PT30X-SE-xx-G3"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c=9.0.41",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV PTZOptics PT-STUDIOPRO: \u003c=9.0.41",
                  "product_id": "CSAFPID-0035"
                }
              }
            ],
            "category": "product_name",
            "name": "PTZOptics PT-STUDIOPRO"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c=7.2.94",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV PTZOptics PTZOptics VL Fixed Camera/NDI Fixed Camera: \u003c=7.2.94",
                  "product_id": "CSAFPID-0036"
                }
              }
            ],
            "category": "product_name",
            "name": "PTZOptics PTZOptics VL Fixed Camera/NDI Fixed Camera"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV SMTAV Pan-Tilt-Zoom Cameras: vers:all/*",
                  "product_id": "CSAFPID-0037"
                }
              }
            ],
            "category": "product_name",
            "name": "SMTAV Pan-Tilt-Zoom Cameras"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV multiCAM Systems Pan-Tilt-Zoom Cameras: vers:all/*",
                  "product_id": "CSAFPID-0038"
                }
              }
            ],
            "category": "product_name",
            "name": "multiCAM Systems Pan-Tilt-Zoom Cameras"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV ValueHD Pan-Tilt-Zoom Cameras: vers:all/*",
                  "product_id": "CSAFPID-0039"
                }
              }
            ],
            "category": "product_name",
            "name": "ValueHD Pan-Tilt-Zoom Cameras"
          }
        ],
        "category": "vendor",
        "name": "ValueHD, PTZOptics, multiCAM Systems, SMTAV"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-8956",
      "cwe": {
        "id": "CWE-287",
        "name": "Improper Authentication"
      },
      "notes": [
        {
          "category": "summary",
          "text": "PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an insufficient authentication issue. The camera does not properly enforce authentication to /cgi-bin/param.cgi when requests are sent without an HTTP Authorization header. The result is a remote and unauthenticated attacker can leak sensitive data such as usernames, password hashes, and configurations details. Additionally, the attacker can update individual configuration values or overwrite the whole file.",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0036",
          "CSAFPID-0037",
          "CSAFPID-0038",
          "CSAFPID-0039"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-8956"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "PTZOptics has provided a fix to the affected versions for the listed CVEs. The fix for each product can be obtained on the PTZOptics Known Vulnerabilities and Fixes site.",
          "product_ids": [
            "CSAFPID-0036",
            "CSAFPID-0037",
            "CSAFPID-0038",
            "CSAFPID-0039"
          ],
          "url": "https://ptzoptics.com/known-vulnerabilities-and-fixes/"
        },
        {
          "category": "mitigation",
          "details": "ValueHD, multiCAM Systems, and SMTAV did not respond to requests for coordination. Please contact the respective companies through the following means for more information:",
          "product_ids": [
            "CSAFPID-0036",
            "CSAFPID-0037",
            "CSAFPID-0038",
            "CSAFPID-0039"
          ]
        },
        {
          "category": "mitigation",
          "details": "SMTAV Contact Us page.",
          "product_ids": [
            "CSAFPID-0036",
            "CSAFPID-0037",
            "CSAFPID-0038",
            "CSAFPID-0039"
          ],
          "url": "https://www.smtav.com/pages/about"
        },
        {
          "category": "mitigation",
          "details": "multiCAM Systems Contact Us page.",
          "product_ids": [
            "CSAFPID-0036",
            "CSAFPID-0037",
            "CSAFPID-0038",
            "CSAFPID-0039"
          ],
          "url": "https://www.multicam-systems.com/contact/"
        },
        {
          "category": "mitigation",
          "details": "ValueHD Contact Us page.",
          "product_ids": [
            "CSAFPID-0036",
            "CSAFPID-0037",
            "CSAFPID-0038",
            "CSAFPID-0039"
          ],
          "url": "https://global.vhd.com.cn/list-42.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0036",
            "CSAFPID-0037",
            "CSAFPID-0038",
            "CSAFPID-0039"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2024-8957",
      "cwe": {
        "id": "CWE-78",
        "name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
      },
      "notes": [
        {
          "category": "summary",
          "text": "PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an OS command injection issue. The camera does not sufficiently validate the ntp_addr configuration value which may lead to arbitrary command execution when ntp_client is started. When chained with CVE-2024-8956, a remote and unauthenticated attacker can execute arbitrary OS commands on affected devices.",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0036",
          "CSAFPID-0037",
          "CSAFPID-0038",
          "CSAFPID-0039"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-8957"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "PTZOptics has provided a fix to the affected versions for the listed CVEs. The fix for each product can be obtained on the PTZOptics Known Vulnerabilities and Fixes site.",
          "product_ids": [
            "CSAFPID-0036",
            "CSAFPID-0037",
            "CSAFPID-0038",
            "CSAFPID-0039"
          ],
          "url": "https://ptzoptics.com/known-vulnerabilities-and-fixes/"
        },
        {
          "category": "mitigation",
          "details": "ValueHD, multiCAM Systems, and SMTAV did not respond to requests for coordination. Please contact the respective companies through the following means for more information:",
          "product_ids": [
            "CSAFPID-0036",
            "CSAFPID-0037",
            "CSAFPID-0038",
            "CSAFPID-0039"
          ]
        },
        {
          "category": "mitigation",
          "details": "SMTAV Contact Us page.",
          "product_ids": [
            "CSAFPID-0036",
            "CSAFPID-0037",
            "CSAFPID-0038",
            "CSAFPID-0039"
          ],
          "url": "https://www.smtav.com/pages/about"
        },
        {
          "category": "mitigation",
          "details": "multiCAM Systems Contact Us page.",
          "product_ids": [
            "CSAFPID-0036",
            "CSAFPID-0037",
            "CSAFPID-0038",
            "CSAFPID-0039"
          ],
          "url": "https://www.multicam-systems.com/contact/"
        },
        {
          "category": "mitigation",
          "details": "ValueHD Contact Us page.",
          "product_ids": [
            "CSAFPID-0036",
            "CSAFPID-0037",
            "CSAFPID-0038",
            "CSAFPID-0039"
          ],
          "url": "https://global.vhd.com.cn/list-42.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0036",
            "CSAFPID-0037",
            "CSAFPID-0038",
            "CSAFPID-0039"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2025-35451",
      "cwe": {
        "id": "CWE-798",
        "name": "Use of Hard-coded Credentials"
      },
      "notes": [
        {
          "category": "summary",
          "text": "Certain PTZOptics and possibly other ValueHD-based cameras have SSH or telnet or both enabled by default. Operating system users with administrative privileges (including the root user) have default passwords that are trivial to crack. The passwords cannot be changed by the user, nor can the SSH or telnet service be disabled by the user.",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001",
          "CSAFPID-0002",
          "CSAFPID-0003",
          "CSAFPID-0004",
          "CSAFPID-0005",
          "CSAFPID-0006",
          "CSAFPID-0007",
          "CSAFPID-0008",
          "CSAFPID-0009",
          "CSAFPID-0010",
          "CSAFPID-0011",
          "CSAFPID-0012",
          "CSAFPID-0013",
          "CSAFPID-0036",
          "CSAFPID-0037",
          "CSAFPID-0038",
          "CSAFPID-0039"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-35451"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "PTZOptics has provided a fix to the affected versions for the listed CVEs. The fix for each product can be obtained on the PTZOptics Known Vulnerabilities and Fixes site.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-0010",
            "CSAFPID-0011",
            "CSAFPID-0012",
            "CSAFPID-0013",
            "CSAFPID-0036",
            "CSAFPID-0037",
            "CSAFPID-0038",
            "CSAFPID-0039"
          ],
          "url": "https://ptzoptics.com/known-vulnerabilities-and-fixes/"
        },
        {
          "category": "mitigation",
          "details": "ValueHD, multiCAM Systems, and SMTAV did not respond to requests for coordination. Please contact the respective companies through the following means for more information:",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-0010",
            "CSAFPID-0011",
            "CSAFPID-0012",
            "CSAFPID-0013",
            "CSAFPID-0036",
            "CSAFPID-0037",
            "CSAFPID-0038",
            "CSAFPID-0039"
          ]
        },
        {
          "category": "mitigation",
          "details": "SMTAV Contact Us page.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-0010",
            "CSAFPID-0011",
            "CSAFPID-0012",
            "CSAFPID-0013",
            "CSAFPID-0036",
            "CSAFPID-0037",
            "CSAFPID-0038",
            "CSAFPID-0039"
          ],
          "url": "https://www.smtav.com/pages/about"
        },
        {
          "category": "mitigation",
          "details": "multiCAM Systems Contact Us page.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-0010",
            "CSAFPID-0011",
            "CSAFPID-0012",
            "CSAFPID-0013",
            "CSAFPID-0036",
            "CSAFPID-0037",
            "CSAFPID-0038",
            "CSAFPID-0039"
          ],
          "url": "https://www.multicam-systems.com/contact/"
        },
        {
          "category": "mitigation",
          "details": "ValueHD Contact Us page.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-0010",
            "CSAFPID-0011",
            "CSAFPID-0012",
            "CSAFPID-0013",
            "CSAFPID-0036",
            "CSAFPID-0037",
            "CSAFPID-0038",
            "CSAFPID-0039"
          ],
          "url": "https://global.vhd.com.cn/list-42.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-0010",
            "CSAFPID-0011",
            "CSAFPID-0012",
            "CSAFPID-0013",
            "CSAFPID-0036",
            "CSAFPID-0037",
            "CSAFPID-0038",
            "CSAFPID-0039"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2025-35452",
      "cwe": {
        "id": "CWE-798",
        "name": "Use of Hard-coded Credentials"
      },
      "notes": [
        {
          "category": "summary",
          "text": "PTZOptics and possibly other ValueHD-based cameras use a default, shared password for the administrative web interface. The table below shows the affected firmware. This has been patched on production firmware for the current generation of devices.",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0014",
          "CSAFPID-0015",
          "CSAFPID-0016",
          "CSAFPID-0017",
          "CSAFPID-0018",
          "CSAFPID-0019",
          "CSAFPID-0020",
          "CSAFPID-0021",
          "CSAFPID-0022",
          "CSAFPID-0023",
          "CSAFPID-0024",
          "CSAFPID-0025",
          "CSAFPID-0026",
          "CSAFPID-0027",
          "CSAFPID-0028",
          "CSAFPID-0029",
          "CSAFPID-0030",
          "CSAFPID-0031",
          "CSAFPID-0032",
          "CSAFPID-0033",
          "CSAFPID-0034",
          "CSAFPID-0035",
          "CSAFPID-0036",
          "CSAFPID-0037",
          "CSAFPID-0038",
          "CSAFPID-0039"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-35452"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "PTZOptics has provided a fix to the affected versions for the listed CVEs. The fix for each product can be obtained on the PTZOptics Known Vulnerabilities and Fixes site.",
          "product_ids": [
            "CSAFPID-0014",
            "CSAFPID-0015",
            "CSAFPID-0016",
            "CSAFPID-0017",
            "CSAFPID-0018",
            "CSAFPID-0019",
            "CSAFPID-0020",
            "CSAFPID-0021",
            "CSAFPID-0022",
            "CSAFPID-0023",
            "CSAFPID-0024",
            "CSAFPID-0025",
            "CSAFPID-0026",
            "CSAFPID-0027",
            "CSAFPID-0028",
            "CSAFPID-0029",
            "CSAFPID-0030",
            "CSAFPID-0031",
            "CSAFPID-0032",
            "CSAFPID-0033",
            "CSAFPID-0034",
            "CSAFPID-0035",
            "CSAFPID-0036",
            "CSAFPID-0037",
            "CSAFPID-0038",
            "CSAFPID-0039"
          ],
          "url": "https://ptzoptics.com/known-vulnerabilities-and-fixes/"
        },
        {
          "category": "mitigation",
          "details": "ValueHD, multiCAM Systems, and SMTAV did not respond to requests for coordination. Please contact the respective companies through the following means for more information:",
          "product_ids": [
            "CSAFPID-0014",
            "CSAFPID-0015",
            "CSAFPID-0016",
            "CSAFPID-0017",
            "CSAFPID-0018",
            "CSAFPID-0019",
            "CSAFPID-0020",
            "CSAFPID-0021",
            "CSAFPID-0022",
            "CSAFPID-0023",
            "CSAFPID-0024",
            "CSAFPID-0025",
            "CSAFPID-0026",
            "CSAFPID-0027",
            "CSAFPID-0028",
            "CSAFPID-0029",
            "CSAFPID-0030",
            "CSAFPID-0031",
            "CSAFPID-0032",
            "CSAFPID-0033",
            "CSAFPID-0034",
            "CSAFPID-0035",
            "CSAFPID-0036",
            "CSAFPID-0037",
            "CSAFPID-0038",
            "CSAFPID-0039"
          ]
        },
        {
          "category": "mitigation",
          "details": "SMTAV Contact Us page.",
          "product_ids": [
            "CSAFPID-0014",
            "CSAFPID-0015",
            "CSAFPID-0016",
            "CSAFPID-0017",
            "CSAFPID-0018",
            "CSAFPID-0019",
            "CSAFPID-0020",
            "CSAFPID-0021",
            "CSAFPID-0022",
            "CSAFPID-0023",
            "CSAFPID-0024",
            "CSAFPID-0025",
            "CSAFPID-0026",
            "CSAFPID-0027",
            "CSAFPID-0028",
            "CSAFPID-0029",
            "CSAFPID-0030",
            "CSAFPID-0031",
            "CSAFPID-0032",
            "CSAFPID-0033",
            "CSAFPID-0034",
            "CSAFPID-0035",
            "CSAFPID-0036",
            "CSAFPID-0037",
            "CSAFPID-0038",
            "CSAFPID-0039"
          ],
          "url": "https://www.smtav.com/pages/about"
        },
        {
          "category": "mitigation",
          "details": "multiCAM Systems Contact Us page.",
          "product_ids": [
            "CSAFPID-0014",
            "CSAFPID-0015",
            "CSAFPID-0016",
            "CSAFPID-0017",
            "CSAFPID-0018",
            "CSAFPID-0019",
            "CSAFPID-0020",
            "CSAFPID-0021",
            "CSAFPID-0022",
            "CSAFPID-0023",
            "CSAFPID-0024",
            "CSAFPID-0025",
            "CSAFPID-0026",
            "CSAFPID-0027",
            "CSAFPID-0028",
            "CSAFPID-0029",
            "CSAFPID-0030",
            "CSAFPID-0031",
            "CSAFPID-0032",
            "CSAFPID-0033",
            "CSAFPID-0034",
            "CSAFPID-0035",
            "CSAFPID-0036",
            "CSAFPID-0037",
            "CSAFPID-0038",
            "CSAFPID-0039"
          ],
          "url": "https://www.multicam-systems.com/contact/"
        },
        {
          "category": "mitigation",
          "details": "ValueHD Contact Us page.",
          "product_ids": [
            "CSAFPID-0014",
            "CSAFPID-0015",
            "CSAFPID-0016",
            "CSAFPID-0017",
            "CSAFPID-0018",
            "CSAFPID-0019",
            "CSAFPID-0020",
            "CSAFPID-0021",
            "CSAFPID-0022",
            "CSAFPID-0023",
            "CSAFPID-0024",
            "CSAFPID-0025",
            "CSAFPID-0026",
            "CSAFPID-0027",
            "CSAFPID-0028",
            "CSAFPID-0029",
            "CSAFPID-0030",
            "CSAFPID-0031",
            "CSAFPID-0032",
            "CSAFPID-0033",
            "CSAFPID-0034",
            "CSAFPID-0035",
            "CSAFPID-0036",
            "CSAFPID-0037",
            "CSAFPID-0038",
            "CSAFPID-0039"
          ],
          "url": "https://global.vhd.com.cn/list-42.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0014",
            "CSAFPID-0015",
            "CSAFPID-0016",
            "CSAFPID-0017",
            "CSAFPID-0018",
            "CSAFPID-0019",
            "CSAFPID-0020",
            "CSAFPID-0021",
            "CSAFPID-0022",
            "CSAFPID-0023",
            "CSAFPID-0024",
            "CSAFPID-0025",
            "CSAFPID-0026",
            "CSAFPID-0027",
            "CSAFPID-0028",
            "CSAFPID-0029",
            "CSAFPID-0030",
            "CSAFPID-0031",
            "CSAFPID-0032",
            "CSAFPID-0033",
            "CSAFPID-0034",
            "CSAFPID-0035",
            "CSAFPID-0036",
            "CSAFPID-0037",
            "CSAFPID-0038",
            "CSAFPID-0039"
          ]
        }
      ]
    }
  ]
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CVE-2025-35451 (GCVE-0-2025-35451)

GHSA-J5FJ-CV29-J569

FKIE_CVE-2025-35451

ICSA-25-162-10

Tags

Sightings

Nomenclature