Skip to content
Noroxi

PTZOptics records

4 published records for vendor PTZOptics. 2 of them have been exploited in the wild (listed in CISA KEV) and 2 have a ready-made attack tool.

Filter by product ↓

Researcher profile

Entered KEV
2 · 50%
Weaponized
2 · 50%
Pre-auth RCE
0
With a fix record
50%
Median publish → KEV
48 days

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

  1. 24
  2. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

4 records
  • CVE-2024-8956
    84Now

    PTZOptics NDI and SDI Cameras /cgi-bin/param.cgi Insufficient Authentication

    CriticalCVSS 9.1KEVWeaponizedEPSS 58%

    ptzoptics · pt30x-sdi firmwareSep 17, 2024

  • CVE-2024-8957
    82Now

    PTZOptics NDI and SDI Cameras Command Injection via NTP Address Configuration

    HighCVSS 7.2KEVWeaponizedEPSS 79%

    ptzoptics · pt30x-sdi firmwareSep 17, 2024

  • CVE-2025-35451
    37Monitor

    Pan-Tilt-Zoom cameras hard-coded default passwords with SSH and telnet enabled

    CriticalCVSS 9.3No exploitEPSS 0%

    ptzoptics · pt12x-sdi-xx-g2 firmwareSep 5, 2025

  • CVE-2025-35452
    36Monitor

    Pan-Tilt-Zoom cameras default administrative credentials for web interface

    CriticalCVSS 9.2No exploitEPSS 0%

    ptzoptics · pt12x-sdi-xx-g2 firmwareSep 5, 2025