Description (CNA)
PTZOptics and possibly other ValueHD-based pan-tilt-zoom cameras use default, shared credentials for the administrative web interface.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| PTZOptics / PT12X-SE-xx-G3 | affected 0 before 9.1.43; unaffected 9.1.43 |
| PTZOptics / PT12X-LINK-4K-xx | affected 0 before 0.0.63; unaffected 0.0.63 |
| PTZOptics / PT20X-SE-xx-G3 | affected 0 before 9.1.32; unaffected 9.1.32 |
| PTZOptics / PT20X-LINK-4K-xx | affected 0 before 0.0.89; unaffected 0.0.89 |
| PTZOptics / PT30X-SE-xx-G3 | affected 0 before 9.1.33; unaffected 9.1.33 |
| PTZOptics / PT30X-LINK-4K-xx | affected 0 before 2.0.71; unaffected 2.0.71 |
| PTZOptics / PT-STUDIOPRO | affected 0 before 9.0.41; unaffected 9.0.41 |
| PTZOptics / PT12X-STUDIO-4K-xx-G3 | affected 0 before 8.1.90; unaffected 8.1.90 |
| PTZOptics / PT20X-STUDIO-4K-xx-G3 | affected 0 before 8.1.90; unaffected 8.1.90 |
| PTZOptics / PT12X-SDI/NDI-xx | affected 0 before 6.3.70; unaffected 6.3.70 |
| PTZOptics / PT12X-USB-xx | affected 0 before 6.2.88; unaffected 6.2.88 |
| PTZOptics / PT20X-SDI/NDI-xx | affected 0 before 6.3.27; unaffected 6.3.27 |
| SMTAV / Pan-Tilt-Zoom Cameras | affected * |
| PTZOptics / PT30X-SDI/NDI-xx | affected 0 before 6.3.43; unaffected 6.3.43 |
| multiCAM Systems / Pan-Tilt-Zoom Cameras | affected * |
| PTZOptics / VL Fixed Camera/NDI Fixed Camera | affected 0 before 7.2.94; unaffected 7.2.94 |
| PTZOptics / 12x Fixed Camera/NDI Fixed Camera | affected 0 before 7.2.85; unaffected 7.2.85 |
| PTZOptics / 20x Fixed Camera/NDI Fixed Camera | affected 0 before 7.2.94; unaffected 7.2.94 |
| PTZOptics / EPTZ Fixed Camera/NDI Fixed Camera | affected 0 before 8.1.89; unaffected 8.1.89 |
| PTZOptics / HC-EPTZ-NDI | affected 0 before 8.2.14; unaffected 8.2.14 |
| PTZOptics / PT12X-4K-xx-G3 | affected 0 before 0.0.58; unaffected 0.0.58 |
| PTZOptics / PT20X-4K-xx-G3 | affected 0 before 0.0.85; unaffected 0.0.85 |
| PTZOptics / PT30X-4K-xx-G3 | affected 0 before 2.0.64; unaffected 2.0.64 |
| PTZOptics / PT20X-USB-xx | affected 0 before 6.2.81; unaffected 6.2.81 |
| ValueHD / Pan-Tilt-Zoom Cameras | affected * |
CWE
CWE-798, CWE-1392
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-10
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-162-10.json
- https://www.cve.org/CVERecord?id=CVE-2025-35452
- https://www.labs.greynoise.io/grimoire/2024-10-31-sift-0-day-rce/
- https://www.greynoise.io/blog/greynoise-intelligence-discovers-zero-day-vulnerabilities-in-live-streaming-cameras-with-the-help-of-ai
ADP enrichment
No English description supplied.
No references supplied.