Pan-Tilt-Zoom cameras hard-coded default passwords with SSH and telnet enabled
Priority MEDIUM 50CWE-798Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-798.
Summary
PTZOptics and possibly other ValueHD-based pan-tilt-zoom cameras use hard-coded, default administrative credentials. The passwords can readily be cracked. Many cameras have SSH or telnet listening on all interfaces. The passwords cannot be changed by the user, nor can the SSH or telnet service be disabled by the user.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00805 57th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed PT12X-SE-xx-G3 (PTZOptics): 9.1.43PT12X-LINK-4K-xx (PTZOptics): 0.0.63+20 more products
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| PTZOptics | PT12X-SE-xx-G3 | before 9.1.43 | 9.1.43 | Patch available | CNA |
| PTZOptics | PT12X-LINK-4K-xx | before 0.0.63 | 0.0.63 | Patch available | CNA |
| PTZOptics | PT20X-SE-xx-G3 | before 9.1.32 | 9.1.32 | Patch available | CNA |
| PTZOptics | PT20X-LINK-4K-xx | before 0.0.89 | 0.0.89 | Patch available | CNA |
| PTZOptics | PT-STUDIOPRO | before 9.0.41 | 9.0.41 | Patch available | CNA |
| PTZOptics | PT30X-SE-xx-G3 | before 9.1.33 | 9.1.33 | Patch available | CNA |
| PTZOptics | PT30X-LINK-4K-xx | before 2.0.71 | 2.0.71 | Patch available | CNA |
| PTZOptics | PT12X-STUDIO-4K-xx-G3 | before 8.1.90 | 8.1.90 | Patch available | CNA |
| PTZOptics | PT20X-STUDIO-4K-xx-G3 | before 8.1.90 | 8.1.90 | Patch available | CNA |
| PTZOptics | PT12X-SDI/NDI-xx | before 6.3.70 | 6.3.70 | Patch available | CNA |
| PTZOptics | PT12X-USB-xx | before 6.2.88 | 6.2.88 | Patch available | CNA |
| PTZOptics | PT20X-SDI/NDI-xx | before 6.3.27 | 6.3.27 | Patch available | CNA |
| SMTAV | Pan-Tilt-Zoom Cameras | all versions | — | No fix listed | CNA |
| PTZOptics | PT30X-SDI/NDI-xx | before 6.3.43 | 6.3.43 | Patch available | CNA |
| multiCAM Systems | Pan-Tilt-Zoom Cameras | all versions | — | No fix listed | CNA |
| PTZOptics | VL Fixed Camera/NDI Fixed Camera | before 7.2.94 | 7.2.94 | Patch available | CNA |
| PTZOptics | 12x Fixed Camera/NDI Fixed Camera | before 7.2.85 | 7.2.85 | Patch available | CNA |
| PTZOptics | 20x Fixed Camera/NDI Fixed Camera | before 7.2.94 | 7.2.94 | Patch available | CNA |
| PTZOptics | EPTZ Fixed Camera/NDI Fixed Camera | before 8.1.89 | 8.1.89 | Patch available | CNA |
| PTZOptics | HC-EPTZ-NDI | before 8.2.14 | 8.2.14 | Patch available | CNA |
| PTZOptics | PT12X-4K-xx-G3 | before 0.0.58 | 0.0.58 | Patch available | CNA |
| PTZOptics | PT20X-4K-xx-G3 | before 0.0.85 | 0.0.85 | Patch available | CNA |
| PTZOptics | PT20X-USB-xx | before 6.2.81 | 6.2.81 | Patch available | CNA |
| PTZOptics | PT30X-4K-xx-G3 | before 2.0.64 | 2.0.64 | Patch available | CNA |
| ValueHD | Pan-Tilt-Zoom Cameras | all versions | — | No fix listed | CNA |
- PT12X-SE-xx-G3 VendorPTZOptics Affected before 9.1.43 Fixed in 9.1.43 Patch available CNA
- PT12X-LINK-4K-xx VendorPTZOptics Affected before 0.0.63 Fixed in 0.0.63 Patch available CNA
- PT20X-SE-xx-G3 VendorPTZOptics Affected before 9.1.32 Fixed in 9.1.32 Patch available CNA
- PT20X-LINK-4K-xx VendorPTZOptics Affected before 0.0.89 Fixed in 0.0.89 Patch available CNA
- PT-STUDIOPRO VendorPTZOptics Affected before 9.0.41 Fixed in 9.0.41 Patch available CNA
- PT30X-SE-xx-G3 VendorPTZOptics Affected before 9.1.33 Fixed in 9.1.33 Patch available CNA
- PT30X-LINK-4K-xx VendorPTZOptics Affected before 2.0.71 Fixed in 2.0.71 Patch available CNA
- PT12X-STUDIO-4K-xx-G3 VendorPTZOptics Affected before 8.1.90 Fixed in 8.1.90 Patch available CNA
- PT20X-STUDIO-4K-xx-G3 VendorPTZOptics Affected before 8.1.90 Fixed in 8.1.90 Patch available CNA
- PT12X-SDI/NDI-xx VendorPTZOptics Affected before 6.3.70 Fixed in 6.3.70 Patch available CNA
- PT12X-USB-xx VendorPTZOptics Affected before 6.2.88 Fixed in 6.2.88 Patch available CNA
- PT20X-SDI/NDI-xx VendorPTZOptics Affected before 6.3.27 Fixed in 6.3.27 Patch available CNA
- Pan-Tilt-Zoom Cameras VendorSMTAV Affected all versions Fixed in — No fix listed CNA
- PT30X-SDI/NDI-xx VendorPTZOptics Affected before 6.3.43 Fixed in 6.3.43 Patch available CNA
- Pan-Tilt-Zoom Cameras VendormultiCAM Systems Affected all versions Fixed in — No fix listed CNA
- VL Fixed Camera/NDI Fixed Camera VendorPTZOptics Affected before 7.2.94 Fixed in 7.2.94 Patch available CNA
- 12x Fixed Camera/NDI Fixed Camera VendorPTZOptics Affected before 7.2.85 Fixed in 7.2.85 Patch available CNA
- 20x Fixed Camera/NDI Fixed Camera VendorPTZOptics Affected before 7.2.94 Fixed in 7.2.94 Patch available CNA
- EPTZ Fixed Camera/NDI Fixed Camera VendorPTZOptics Affected before 8.1.89 Fixed in 8.1.89 Patch available CNA
- HC-EPTZ-NDI VendorPTZOptics Affected before 8.2.14 Fixed in 8.2.14 Patch available CNA
- PT12X-4K-xx-G3 VendorPTZOptics Affected before 0.0.58 Fixed in 0.0.58 Patch available CNA
- PT20X-4K-xx-G3 VendorPTZOptics Affected before 0.0.85 Fixed in 0.0.85 Patch available CNA
- PT20X-USB-xx VendorPTZOptics Affected before 6.2.81 Fixed in 6.2.81 Patch available CNA
- PT30X-4K-xx-G3 VendorPTZOptics Affected before 2.0.64 Fixed in 2.0.64 Patch available CNA
- Pan-Tilt-Zoom Cameras VendorValueHD Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 102
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:ptzoptics:pt12x-sdi-xx-g2_firmware:*:*:*:*:*:*:*:* | up to 6.3.34 | Vulnerable | PTZOptics |
| cpe:2.3:h:ptzoptics:pt12x-sdi-xx-g2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | PTZOptics |
| cpe:2.3:o:ptzoptics:pt12x-ndi-xx_firmware:*:*:*:*:*:*:*:* | up to 6.3.34 | Vulnerable | PTZOptics |
| cpe:2.3:h:ptzoptics:pt12x-ndi-xx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | PTZOptics |
| cpe:2.3:o:ptzoptics:pt12x-usb-xx-g2_firmware:*:*:*:*:*:*:*:* | up to 6.2.81 | Vulnerable | PTZOptics |
| cpe:2.3:h:ptzoptics:pt12x-usb-xx-g2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | PTZOptics |
| cpe:2.3:o:ptzoptics:pt20x-sdi-xx-g2_firmware:*:*:*:*:*:*:*:* | up to 6.3.20 | Vulnerable | PTZOptics |
| cpe:2.3:h:ptzoptics:pt20x-sdi-xx-g2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | PTZOptics |
| cpe:2.3:o:ptzoptics:pt20x-ndi-xx_firmware:*:*:*:*:*:*:*:* | up to 6.3.20 | Vulnerable | PTZOptics |
| cpe:2.3:h:ptzoptics:pt20x-ndi-xx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | PTZOptics |
- cpe:2.3:o:ptzoptics:pt12x-sdi-xx-g2_firmware:*:*:*:*:*:*:*:* Versions up to 6.3.34 Vulnerable ·PTZOptics
- cpe:2.3:h:ptzoptics:pt12x-sdi-xx-g2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·PTZOptics
- cpe:2.3:o:ptzoptics:pt12x-ndi-xx_firmware:*:*:*:*:*:*:*:* Versions up to 6.3.34 Vulnerable ·PTZOptics
- cpe:2.3:h:ptzoptics:pt12x-ndi-xx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·PTZOptics
- cpe:2.3:o:ptzoptics:pt12x-usb-xx-g2_firmware:*:*:*:*:*:*:*:* Versions up to 6.2.81 Vulnerable ·PTZOptics
- cpe:2.3:h:ptzoptics:pt12x-usb-xx-g2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·PTZOptics
- cpe:2.3:o:ptzoptics:pt20x-sdi-xx-g2_firmware:*:*:*:*:*:*:*:* Versions up to 6.3.20 Vulnerable ·PTZOptics
- cpe:2.3:h:ptzoptics:pt20x-sdi-xx-g2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·PTZOptics
- cpe:2.3:o:ptzoptics:pt20x-ndi-xx_firmware:*:*:*:*:*:*:*:* Versions up to 6.3.20 Vulnerable ·PTZOptics
- cpe:2.3:h:ptzoptics:pt20x-ndi-xx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·PTZOptics
Show 92 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:ptzoptics:pt20x-usb-xx-g2_firmware:*:*:*:*:*:*:*:* | up to 6.2.73 | Vulnerable | PTZOptics |
| cpe:2.3:h:ptzoptics:pt20x-usb-xx-g2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | PTZOptics |
| cpe:2.3:o:ptzoptics:pt30x-sdi-xx-g2_firmware:*:*:*:*:*:*:*:* | up to 6.3.30 | Vulnerable | PTZOptics |
| cpe:2.3:h:ptzoptics:pt30x-sdi-xx-g2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | PTZOptics |
| cpe:2.3:o:ptzoptics:pt30x-ndi-xx_firmware:*:*:*:*:*:*:*:* | up to 6.3.30 | Vulnerable | PTZOptics |
| cpe:2.3:h:ptzoptics:pt30x-ndi-xx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | PTZOptics |
| cpe:2.3:o:ptzoptics:pt12x-zcam_firmware:*:*:*:*:*:*:*:* | up to 7.2.76 | Vulnerable | PTZOptics |
| cpe:2.3:h:ptzoptics:pt12x-zcam:-:*:*:*:*:*:*:* | not specified by NVD | Running on | PTZOptics |
| cpe:2.3:o:ptzoptics:pt20x-zcam_firmware:*:*:*:*:*:*:*:* | up to 7.2.82 | Vulnerable | PTZOptics |
| cpe:2.3:h:ptzoptics:pt20x-zcam:-:*:*:*:*:*:*:* | not specified by NVD | Running on | PTZOptics |
| cpe:2.3:o:ptzoptics:ptvl-zcam_firmware:*:*:*:*:*:*:*:* | up to 7.2.79 | Vulnerable | PTZOptics |
| cpe:2.3:h:ptzoptics:ptvl-zcam:-:*:*:*:*:*:*:* | not specified by NVD | Running on | PTZOptics |
| cpe:2.3:o:ptzoptics:pteptz-zcam-g2_firmware:*:*:*:*:*:*:*:* | up to 8.1.81 | Vulnerable | PTZOptics |
| cpe:2.3:h:ptzoptics:pteptz-zcam-g2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | PTZOptics |
| cpe:2.3:o:ptzoptics:pteptz-ndi-zcam-g2_firmware:*:*:*:*:*:*:*:* | up to 8.1.81 | Vulnerable | PTZOptics |
| cpe:2.3:h:ptzoptics:pteptz-ndi-zcam-g2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | PTZOptics |
| cpe:2.3:o:ptzoptics:vl_fixed_camera_firmware:*:*:*:*:*:*:*:* | up to 7.2.94 | Vulnerable | PTZOptics |
| cpe:2.3:h:ptzoptics:vl_fixed_camera:-:*:*:*:*:*:*:* | not specified by NVD | Running on | PTZOptics |
| cpe:2.3:o:ptzoptics:ndi_fixed_camera_firmware:*:*:*:*:*:*:*:* | up to 7.2.94 | Vulnerable | PTZOptics |
| cpe:2.3:h:ptzoptics:ndi_fixed_camera:-:*:*:*:*:*:*:* | not specified by NVD | Running on | PTZOptics |
| cpe:2.3:o:multicam-systems:mcamii_ptz_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | multiCAM Systems |
| cpe:2.3:h:multicam-systems:mcamii_ptz:*:*:*:*:*:*:*:* | all versions | Running on | multiCAM Systems |
| cpe:2.3:o:smtav:ba30s_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | SMTAV |
| cpe:2.3:h:smtav:ba30s:*:*:*:*:*:*:*:* | all versions | Running on | SMTAV |
| cpe:2.3:o:smtav:ba20s_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | SMTAV |
| cpe:2.3:h:smtav:ba20s:*:*:*:*:*:*:*:* | all versions | Running on | SMTAV |
| cpe:2.3:o:smtav:bv20s_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | SMTAV |
| cpe:2.3:h:smtav:bv20s:*:*:*:*:*:*:*:* | all versions | Running on | SMTAV |
| cpe:2.3:o:smtav:bx30s_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | SMTAV |
| cpe:2.3:h:smtav:bx30s:*:*:*:*:*:*:*:* | all versions | Running on | SMTAV |
| cpe:2.3:o:smtav:bx20n_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | SMTAV |
| cpe:2.3:h:smtav:bx20n:*:*:*:*:*:*:*:* | all versions | Running on | SMTAV |
| cpe:2.3:o:smtav:bx20uhd-n_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | SMTAV |
| cpe:2.3:h:smtav:bx20uhd-n:*:*:*:*:*:*:*:* | all versions | Running on | SMTAV |
| cpe:2.3:o:smtav:bx20uhd_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | SMTAV |
| cpe:2.3:h:smtav:bx20uhd:*:*:*:*:*:*:*:* | all versions | Running on | SMTAV |
| cpe:2.3:o:smtav:ba30-n_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | SMTAV |
| cpe:2.3:h:smtav:ba30-n:*:*:*:*:*:*:*:* | all versions | Running on | SMTAV |
| cpe:2.3:o:smtav:ba20-n_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | SMTAV |
| cpe:2.3:h:smtav:ba20-n:*:*:*:*:*:*:*:* | all versions | Running on | SMTAV |
| cpe:2.3:o:smtav:ba12-n_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | SMTAV |
| cpe:2.3:h:smtav:ba12-n:*:*:*:*:*:*:*:* | all versions | Running on | SMTAV |
| cpe:2.3:o:smtav:hd17h-n_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | SMTAV |
| cpe:2.3:h:smtav:hd17h-n:*:*:*:*:*:*:*:* | all versions | Running on | SMTAV |
| cpe:2.3:o:smtav:bx20s-sh_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | SMTAV |
| cpe:2.3:h:smtav:bx20s-sh:*:*:*:*:*:*:*:* | all versions | Running on | SMTAV |
| cpe:2.3:o:smtav:hd17h_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | SMTAV |
| cpe:2.3:h:smtav:hd17h:*:*:*:*:*:*:*:* | all versions | Running on | SMTAV |
| cpe:2.3:o:smtav:bv30s_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | SMTAV |
| cpe:2.3:h:smtav:bv30s:*:*:*:*:*:*:*:* | all versions | Running on | SMTAV |
| cpe:2.3:o:smtav:ba12s_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | SMTAV |
| cpe:2.3:h:smtav:ba12s:*:*:*:*:*:*:*:* | all versions | Running on | SMTAV |
| cpe:2.3:o:valuehd:vx90_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | ValueHD |
| cpe:2.3:h:valuehd:vx90:*:*:*:*:*:*:*:* | all versions | Running on | ValueHD |
| cpe:2.3:o:valuehd:vx720l_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | ValueHD |
| cpe:2.3:h:valuehd:vx720l:*:*:*:*:*:*:*:* | all versions | Running on | ValueHD |
| cpe:2.3:o:valuehd:vx752ag_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | ValueHD |
| cpe:2.3:h:valuehd:vx752ag:*:*:*:*:*:*:*:* | all versions | Running on | ValueHD |
| cpe:2.3:o:valuehd:vx752a_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | ValueHD |
| cpe:2.3:h:valuehd:vx752a:*:*:*:*:*:*:*:* | all versions | Running on | ValueHD |
| cpe:2.3:o:valuehd:vx751ba_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | ValueHD |
| cpe:2.3:h:valuehd:vx751ba:*:*:*:*:*:*:*:* | all versions | Running on | ValueHD |
| cpe:2.3:o:valuehd:vx630al_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | ValueHD |
| cpe:2.3:h:valuehd:vx630al:*:*:*:*:*:*:*:* | all versions | Running on | ValueHD |
| cpe:2.3:o:valuehd:vx61asl_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | ValueHD |
| cpe:2.3:h:valuehd:vx61asl:*:*:*:*:*:*:*:* | all versions | Running on | ValueHD |
| cpe:2.3:o:valuehd:vx61basl_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | ValueHD |
| cpe:2.3:h:valuehd:vx61basl:*:*:*:*:*:*:*:* | all versions | Running on | ValueHD |
| cpe:2.3:o:valuehd:vx60asl_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | ValueHD |
| cpe:2.3:h:valuehd:vx60asl:*:*:*:*:*:*:*:* | all versions | Running on | ValueHD |
| cpe:2.3:o:valuehd:vx61al_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | ValueHD |
| cpe:2.3:h:valuehd:vx61al:*:*:*:*:*:*:*:* | all versions | Running on | ValueHD |
| cpe:2.3:o:valuehd:vx60al_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | ValueHD |
| cpe:2.3:h:valuehd:vx60al:*:*:*:*:*:*:*:* | all versions | Running on | ValueHD |
| cpe:2.3:o:valuehd:vx701ra_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | ValueHD |
| cpe:2.3:h:valuehd:vx701ra:*:*:*:*:*:*:*:* | all versions | Running on | ValueHD |
| cpe:2.3:o:valuehd:vx701ta_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | ValueHD |
| cpe:2.3:h:valuehd:vx701ta:*:*:*:*:*:*:*:* | all versions | Running on | ValueHD |
| cpe:2.3:o:valuehd:vx800i2_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | ValueHD |
| cpe:2.3:h:valuehd:vx800i2:*:*:*:*:*:*:*:* | all versions | Running on | ValueHD |
| cpe:2.3:o:valuehd:v61w_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | ValueHD |
| cpe:2.3:h:valuehd:v61w:*:*:*:*:*:*:*:* | all versions | Running on | ValueHD |
| cpe:2.3:o:valuehd:v63xl_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | ValueHD |
| cpe:2.3:h:valuehd:v63xl:*:*:*:*:*:*:*:* | all versions | Running on | ValueHD |
| cpe:2.3:o:valuehd:v60xl_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | ValueHD |
| cpe:2.3:h:valuehd:v60xl:*:*:*:*:*:*:*:* | all versions | Running on | ValueHD |
| cpe:2.3:o:valuehd:vx70uvs_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | ValueHD |
| cpe:2.3:h:valuehd:vx70uvs:*:*:*:*:*:*:*:* | all versions | Running on | ValueHD |
| cpe:2.3:o:valuehd:vx71uvs_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | ValueHD |
| cpe:2.3:h:valuehd:vx71uvs:*:*:*:*:*:*:*:* | all versions | Running on | ValueHD |
| cpe:2.3:o:valuehd:v71uvs_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | ValueHD |
| cpe:2.3:h:valuehd:v71uvs:*:*:*:*:*:*:*:* | all versions | Running on | ValueHD |
- cpe:2.3:o:ptzoptics:pt20x-usb-xx-g2_firmware:*:*:*:*:*:*:*:* Versions up to 6.2.73 Vulnerable ·PTZOptics
- cpe:2.3:h:ptzoptics:pt20x-usb-xx-g2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·PTZOptics
- cpe:2.3:o:ptzoptics:pt30x-sdi-xx-g2_firmware:*:*:*:*:*:*:*:* Versions up to 6.3.30 Vulnerable ·PTZOptics
- cpe:2.3:h:ptzoptics:pt30x-sdi-xx-g2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·PTZOptics
- cpe:2.3:o:ptzoptics:pt30x-ndi-xx_firmware:*:*:*:*:*:*:*:* Versions up to 6.3.30 Vulnerable ·PTZOptics
- cpe:2.3:h:ptzoptics:pt30x-ndi-xx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·PTZOptics
- cpe:2.3:o:ptzoptics:pt12x-zcam_firmware:*:*:*:*:*:*:*:* Versions up to 7.2.76 Vulnerable ·PTZOptics
- cpe:2.3:h:ptzoptics:pt12x-zcam:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·PTZOptics
- cpe:2.3:o:ptzoptics:pt20x-zcam_firmware:*:*:*:*:*:*:*:* Versions up to 7.2.82 Vulnerable ·PTZOptics
- cpe:2.3:h:ptzoptics:pt20x-zcam:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·PTZOptics
- cpe:2.3:o:ptzoptics:ptvl-zcam_firmware:*:*:*:*:*:*:*:* Versions up to 7.2.79 Vulnerable ·PTZOptics
- cpe:2.3:h:ptzoptics:ptvl-zcam:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·PTZOptics
- cpe:2.3:o:ptzoptics:pteptz-zcam-g2_firmware:*:*:*:*:*:*:*:* Versions up to 8.1.81 Vulnerable ·PTZOptics
- cpe:2.3:h:ptzoptics:pteptz-zcam-g2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·PTZOptics
- cpe:2.3:o:ptzoptics:pteptz-ndi-zcam-g2_firmware:*:*:*:*:*:*:*:* Versions up to 8.1.81 Vulnerable ·PTZOptics
- cpe:2.3:h:ptzoptics:pteptz-ndi-zcam-g2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·PTZOptics
- cpe:2.3:o:ptzoptics:vl_fixed_camera_firmware:*:*:*:*:*:*:*:* Versions up to 7.2.94 Vulnerable ·PTZOptics
- cpe:2.3:h:ptzoptics:vl_fixed_camera:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·PTZOptics
- cpe:2.3:o:ptzoptics:ndi_fixed_camera_firmware:*:*:*:*:*:*:*:* Versions up to 7.2.94 Vulnerable ·PTZOptics
- cpe:2.3:h:ptzoptics:ndi_fixed_camera:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·PTZOptics
- cpe:2.3:o:multicam-systems:mcamii_ptz_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·multiCAM Systems
- cpe:2.3:h:multicam-systems:mcamii_ptz:*:*:*:*:*:*:*:* Versions all versions Running on ·multiCAM Systems
- cpe:2.3:o:smtav:ba30s_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·SMTAV
- cpe:2.3:h:smtav:ba30s:*:*:*:*:*:*:*:* Versions all versions Running on ·SMTAV
- cpe:2.3:o:smtav:ba20s_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·SMTAV
- cpe:2.3:h:smtav:ba20s:*:*:*:*:*:*:*:* Versions all versions Running on ·SMTAV
- cpe:2.3:o:smtav:bv20s_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·SMTAV
- cpe:2.3:h:smtav:bv20s:*:*:*:*:*:*:*:* Versions all versions Running on ·SMTAV
- cpe:2.3:o:smtav:bx30s_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·SMTAV
- cpe:2.3:h:smtav:bx30s:*:*:*:*:*:*:*:* Versions all versions Running on ·SMTAV
- cpe:2.3:o:smtav:bx20n_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·SMTAV
- cpe:2.3:h:smtav:bx20n:*:*:*:*:*:*:*:* Versions all versions Running on ·SMTAV
- cpe:2.3:o:smtav:bx20uhd-n_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·SMTAV
- cpe:2.3:h:smtav:bx20uhd-n:*:*:*:*:*:*:*:* Versions all versions Running on ·SMTAV
- cpe:2.3:o:smtav:bx20uhd_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·SMTAV
- cpe:2.3:h:smtav:bx20uhd:*:*:*:*:*:*:*:* Versions all versions Running on ·SMTAV
- cpe:2.3:o:smtav:ba30-n_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·SMTAV
- cpe:2.3:h:smtav:ba30-n:*:*:*:*:*:*:*:* Versions all versions Running on ·SMTAV
- cpe:2.3:o:smtav:ba20-n_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·SMTAV
- cpe:2.3:h:smtav:ba20-n:*:*:*:*:*:*:*:* Versions all versions Running on ·SMTAV
- cpe:2.3:o:smtav:ba12-n_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·SMTAV
- cpe:2.3:h:smtav:ba12-n:*:*:*:*:*:*:*:* Versions all versions Running on ·SMTAV
- cpe:2.3:o:smtav:hd17h-n_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·SMTAV
- cpe:2.3:h:smtav:hd17h-n:*:*:*:*:*:*:*:* Versions all versions Running on ·SMTAV
- cpe:2.3:o:smtav:bx20s-sh_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·SMTAV
- cpe:2.3:h:smtav:bx20s-sh:*:*:*:*:*:*:*:* Versions all versions Running on ·SMTAV
- cpe:2.3:o:smtav:hd17h_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·SMTAV
- cpe:2.3:h:smtav:hd17h:*:*:*:*:*:*:*:* Versions all versions Running on ·SMTAV
- cpe:2.3:o:smtav:bv30s_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·SMTAV
- cpe:2.3:h:smtav:bv30s:*:*:*:*:*:*:*:* Versions all versions Running on ·SMTAV
- cpe:2.3:o:smtav:ba12s_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·SMTAV
- cpe:2.3:h:smtav:ba12s:*:*:*:*:*:*:*:* Versions all versions Running on ·SMTAV
- cpe:2.3:o:valuehd:vx90_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·ValueHD
- cpe:2.3:h:valuehd:vx90:*:*:*:*:*:*:*:* Versions all versions Running on ·ValueHD
- cpe:2.3:o:valuehd:vx720l_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·ValueHD
- cpe:2.3:h:valuehd:vx720l:*:*:*:*:*:*:*:* Versions all versions Running on ·ValueHD
- cpe:2.3:o:valuehd:vx752ag_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·ValueHD
- cpe:2.3:h:valuehd:vx752ag:*:*:*:*:*:*:*:* Versions all versions Running on ·ValueHD
- cpe:2.3:o:valuehd:vx752a_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·ValueHD
- cpe:2.3:h:valuehd:vx752a:*:*:*:*:*:*:*:* Versions all versions Running on ·ValueHD
- cpe:2.3:o:valuehd:vx751ba_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·ValueHD
- cpe:2.3:h:valuehd:vx751ba:*:*:*:*:*:*:*:* Versions all versions Running on ·ValueHD
- cpe:2.3:o:valuehd:vx630al_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·ValueHD
- cpe:2.3:h:valuehd:vx630al:*:*:*:*:*:*:*:* Versions all versions Running on ·ValueHD
- cpe:2.3:o:valuehd:vx61asl_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·ValueHD
- cpe:2.3:h:valuehd:vx61asl:*:*:*:*:*:*:*:* Versions all versions Running on ·ValueHD
- cpe:2.3:o:valuehd:vx61basl_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·ValueHD
- cpe:2.3:h:valuehd:vx61basl:*:*:*:*:*:*:*:* Versions all versions Running on ·ValueHD
- cpe:2.3:o:valuehd:vx60asl_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·ValueHD
- cpe:2.3:h:valuehd:vx60asl:*:*:*:*:*:*:*:* Versions all versions Running on ·ValueHD
- cpe:2.3:o:valuehd:vx61al_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·ValueHD
- cpe:2.3:h:valuehd:vx61al:*:*:*:*:*:*:*:* Versions all versions Running on ·ValueHD
- cpe:2.3:o:valuehd:vx60al_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·ValueHD
- cpe:2.3:h:valuehd:vx60al:*:*:*:*:*:*:*:* Versions all versions Running on ·ValueHD
- cpe:2.3:o:valuehd:vx701ra_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·ValueHD
- cpe:2.3:h:valuehd:vx701ra:*:*:*:*:*:*:*:* Versions all versions Running on ·ValueHD
- cpe:2.3:o:valuehd:vx701ta_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·ValueHD
- cpe:2.3:h:valuehd:vx701ta:*:*:*:*:*:*:*:* Versions all versions Running on ·ValueHD
- cpe:2.3:o:valuehd:vx800i2_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·ValueHD
- cpe:2.3:h:valuehd:vx800i2:*:*:*:*:*:*:*:* Versions all versions Running on ·ValueHD
- cpe:2.3:o:valuehd:v61w_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·ValueHD
- cpe:2.3:h:valuehd:v61w:*:*:*:*:*:*:*:* Versions all versions Running on ·ValueHD
- cpe:2.3:o:valuehd:v63xl_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·ValueHD
- cpe:2.3:h:valuehd:v63xl:*:*:*:*:*:*:*:* Versions all versions Running on ·ValueHD
- cpe:2.3:o:valuehd:v60xl_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·ValueHD
- cpe:2.3:h:valuehd:v60xl:*:*:*:*:*:*:*:* Versions all versions Running on ·ValueHD
- cpe:2.3:o:valuehd:vx70uvs_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·ValueHD
- cpe:2.3:h:valuehd:vx70uvs:*:*:*:*:*:*:*:* Versions all versions Running on ·ValueHD
- cpe:2.3:o:valuehd:vx71uvs_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·ValueHD
- cpe:2.3:h:valuehd:vx71uvs:*:*:*:*:*:*:*:* Versions all versions Running on ·ValueHD
- cpe:2.3:o:valuehd:v71uvs_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·ValueHD
- cpe:2.3:h:valuehd:v71uvs:*:*:*:*:*:*:*:* Versions all versions Running on ·ValueHD
Remediation
- Fix · CNA PT12X-SE-xx-G3 (PTZOptics) Fixed in 9.1.43
- Fix · CNA PT12X-LINK-4K-xx (PTZOptics) Fixed in 0.0.63
- Fix · CNA PT20X-SE-xx-G3 (PTZOptics) Fixed in 9.1.32
- Fix · CNA PT20X-LINK-4K-xx (PTZOptics) Fixed in 0.0.89
- Fix · CNA PT-STUDIOPRO (PTZOptics) Fixed in 9.0.41
- Fix · CNA PT30X-SE-xx-G3 (PTZOptics) Fixed in 9.1.33
- Fix · CNA PT30X-LINK-4K-xx (PTZOptics) Fixed in 2.0.71
- Fix · CNA PT12X-STUDIO-4K-xx-G3 (PTZOptics) Fixed in 8.1.90
- Fix · CNA PT20X-STUDIO-4K-xx-G3 (PTZOptics) Fixed in 8.1.90
- Fix · CNA PT12X-SDI/NDI-xx (PTZOptics) Fixed in 6.3.70
- Fix · CNA PT12X-USB-xx (PTZOptics) Fixed in 6.2.88
- Fix · CNA PT20X-SDI/NDI-xx (PTZOptics) Fixed in 6.3.27
- Fix · CNA PT30X-SDI/NDI-xx (PTZOptics) Fixed in 6.3.43
- Fix · CNA VL Fixed Camera/NDI Fixed Camera (PTZOptics) Fixed in 7.2.94
- Fix · CNA 12x Fixed Camera/NDI Fixed Camera (PTZOptics) Fixed in 7.2.85
- Fix · CNA 20x Fixed Camera/NDI Fixed Camera (PTZOptics) Fixed in 7.2.94
- Fix · CNA EPTZ Fixed Camera/NDI Fixed Camera (PTZOptics) Fixed in 8.1.89
- Fix · CNA HC-EPTZ-NDI (PTZOptics) Fixed in 8.2.14
- Fix · CNA PT12X-4K-xx-G3 (PTZOptics) Fixed in 0.0.58
- Fix · CNA PT20X-4K-xx-G3 (PTZOptics) Fixed in 0.0.85
- Fix · CNA PT20X-USB-xx (PTZOptics) Fixed in 6.2.81
- Fix · CNA PT30X-4K-xx-G3 (PTZOptics) Fixed in 2.0.64
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Release ·
PTZOptics 12x Fixed Camera/NDI Fixed Camera, 20x Fixed Camera/NDI Fixed Camera and 20 more products 0.0.58, 0.0.63 and 18 more versions
2 records Highest priority Priority MEDIUM 2 MEDIUM
Other records, highest priority first
- TI-2025-24593 Pan-Tilt-Zoom cameras default administrative credentials for web interfacePriority MEDIUM 49
Timeline
- 2026-10-02 Threatist record created from CVE-2025-35451
- 2026-10-03 Alias added: GHSA-j5fj-cv29-j569
More PTZOptics Ndi Fixed Camera Firmware vulnerabilities
- TI-2025-24593 Pan-Tilt-Zoom cameras default administrative credentials for web interface CVSS 4.0CRITICAL 9.2
Sources
- CVE-2025-35451 · CVE Program
- CVE-2025-35451 · NVD
- FIRST EPSS
- GHSA-j5fj-cv29-j569 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences