TI-2024-08317 Aliases CVE-2024-8957 GHSA-9cx9-7v8g-h36v

PTZOptics NDI and SDI Cameras Command Injection via NTP Address Configuration

CRITICAL 91Exploited in the wildCWE-78Published 2024-09-17 · Updated 2025-12-27

Key facts

Attack vector: Network
Privileges required: High
User interaction: None
Attack complexity: Low
Impact type: Code execution
Confidentiality · integrity · availability: High · High · High
Fix status: Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-78.

Summary

PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an OS command injection issue. The camera does not sufficiently validate the ntp_addr configuration value which may lead to arbitrary command execution when ntp_client is started. When chained with CVE-2024-8956, a remote and unauthenticated attacker can execute arbitrary OS commands on affected devices.

Why it matters now

Exploitation Active In CISA KEV since 2024-11-04CISA due date 2024-11-25

EPSS 0.7984 99th percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by NVD

Fix Fixed PT30X-SDI (PTZOptics): 6.3.40PT30X-NDI (PTZOptics): 6.3.40

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: Active
Automatable: No
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
PTZOptics	PT30X-SDI	before 6.3.40	6.3.40	Patch available	CNA
PTZOptics	PT30X-NDI	before 6.3.40	6.3.40	Patch available	CNA

PT30X-SDI VendorPTZOptics Affected before 6.3.40 Fixed in 6.3.40 Patch available CNA
PT30X-NDI VendorPTZOptics Affected before 6.3.40 Fixed in 6.3.40 Patch available CNA

CPE configurations NVD · 4

CPE	Versions	Role	Vendor
cpe:2.3:o:ptzoptics:pt30x-sdi_firmware::::::::	before 6.3.40	Vulnerable	PTZOptics
cpe:2.3:h:ptzoptics:pt30x-sdi:-:::::::*	not specified by NVD	Running on	PTZOptics
cpe:2.3:o:ptzoptics:pt30x-ndi-xx-g2_firmware::::::::	before 6.3.40	Vulnerable	PTZOptics
cpe:2.3:h:ptzoptics:pt30x-ndi-xx-g2:-:::::::*	not specified by NVD	Running on	PTZOptics

cpe:2.3:o:ptzoptics:pt30x-sdi_firmware:*:*:*:*:*:*:*:* Versions before 6.3.40 Vulnerable ·PTZOptics
cpe:2.3:h:ptzoptics:pt30x-sdi:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·PTZOptics
cpe:2.3:o:ptzoptics:pt30x-ndi-xx-g2_firmware:*:*:*:*:*:*:*:* Versions before 6.3.40 Vulnerable ·PTZOptics
cpe:2.3:h:ptzoptics:pt30x-ndi-xx-g2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·PTZOptics

Remediation

Fix · CNA PT30X-SDI (PTZOptics) Fixed in 6.3.40
Fix · CNA PT30X-NDI (PTZOptics) Fixed in 6.3.40

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

Advisory · 2024-09-17
PTZOptics PT30X-NDI, PT30X-SDI — ptzoptics.com/firmware-changelog
2 records Highest priority Priority CRITICAL 2 CRITICAL
Other records, highest priority first
- TI-2024-08316 PTZOptics NDI and SDI Cameras /cgi-bin/param.cgi Insufficient AuthenticationPriority CRITICAL 98
Show all 2 records → Advisory →

Timeline

2024-11-04 Added to CISA KEV
2026-10-02 Threatist record created from CVE-2024-8957
2026-10-03 Alias added: GHSA-9cx9-7v8g-h36v

References

Exploit 1

https://www.labs.greynoise.io/grimoire/2024-10-31-sift-0-day-rce/

Advisory 2

TI-2024-08316 PTZOptics NDI and SDI Cameras /cgi-bin/param.cgi Insufficient Authentication KEVCVSS 3.1CRITICAL 9.1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences