PTZOptics vulnerabilities

Products

• 12x Fixed Camera/NDI Fixed Camera 2
• 20x Fixed Camera/NDI Fixed Camera 2
• EPTZ Fixed Camera/NDI Fixed Camera 2
• HC-EPTZ-NDI 2
• ndi fixed camera firmware 2
• PT-STUDIOPRO 2
• PT12X-4K-xx-G3 2
• PT12X-LINK-4K-xx 2
• pt12x-ndi-xx firmware 2
• pt12x-sdi-xx-g2 firmware 2
• PT12X-SDI/NDI-xx 2
• PT12X-SE-xx-G3 2
• PT12X-STUDIO-4K-xx-G3 2
• PT12X-USB-xx 2
• pt12x-usb-xx-g2 firmware 2
• pt12x-zcam firmware 2
• PT20X-4K-xx-G3 2
• PT20X-LINK-4K-xx 2
• pt20x-sdi-xx-g2 firmware 2
• PT20X-SDI/NDI-xx 2
• PT20X-SE-xx-G3 2
• PT20X-STUDIO-4K-xx-G3 2
• PT20X-USB-xx 2
• pt20x-usb-xx-g2 firmware 2
• pt20x-zcam firmware 2
• PT30X-4K-xx-G3 2
• PT30X-LINK-4K-xx 2
• PT30X-NDI 2
• pt30x-ndi-xx firmware 2
• pt30x-ndi-xx-g2 firmware 2

Latest PTZOptics CVEs

Newest publication first

1. CVE-2026-75969 PTZOptics Missing Authentication in Firmware Upload

   Published 2026-09-30

   Critical·CVSS 9.1 EPSS 0.35%

   Missing authentication for critical function vulnerability for all PTZOptics cameras and the Firmware Upgrade Tool - Firmware Update modules. A missing authentication vulnerability in the firmware update mechanism of affected PTZOptics cameras allows an unauthenticated user to in...

2. CVE-2025-35452 Pan-Tilt-Zoom cameras default administrative credentials for web interface

   Published 2025-09-05

   Critical·CVSS 9.2 EPSS 0.89%

   PTZOptics and possibly other ValueHD-based pan-tilt-zoom cameras use default, shared credentials for the administrative web interface.

3. CVE-2025-35451 Pan-Tilt-Zoom cameras hard-coded default passwords with SSH and telnet enabled

   Published 2025-09-05

   Critical·CVSS 9.3 EPSS 0.80%

   PTZOptics and possibly other ValueHD-based pan-tilt-zoom cameras use hard-coded, default administrative credentials. The passwords can readily be cracked. Many cameras have SSH or telnet listening on all interfaces. The passwords cannot be changed by the user, nor can the SSH or...

4. CVE-2024-8957 PTZOptics NDI and SDI Cameras Command Injection via NTP Address Configuration

   Published 2024-09-17

   High·CVSS 7.2 EPSS 79.8% CISA KEV added 2024-11-04 Exploited in the wild

   PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an OS command injection issue. The camera does not sufficiently validate the ntp_addr configuration value which may lead to arbitrary command execution when ntp_client is started. When chained with CVE-2024-8956,...

5. CVE-2024-8956 PTZOptics NDI and SDI Cameras /cgi-bin/param.cgi Insufficient Authentication

   Published 2024-09-17

   Critical·CVSS 9.1 EPSS 58.8% CISA KEV added 2024-11-04 Exploited in the wild

   PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an insufficient authentication issue. The camera does not properly enforce authentication to /cgi-bin/param.cgi when requests are sent without an HTTP Authorization header. The result is a remote and unauthenticat...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.