Read the docs
TI-2025-24593 Aliases CVE-2025-35452GHSA-gx6v-756j-7g8w

Pan-Tilt-Zoom cameras default administrative credentials for web interface

Priority MEDIUM 49CWE-1392Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
Present
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-798.

Summary

PTZOptics and possibly other ValueHD-based pan-tilt-zoom cameras use default, shared credentials for the administrative web interface.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00886 59th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed PT12X-SE-xx-G3 (PTZOptics): 9.1.43PT12X-LINK-4K-xx (PTZOptics): 0.0.63+20 more products

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
PTZOpticsPT12X-SE-xx-G3before 9.1.439.1.43Patch availableCNA
PTZOpticsPT12X-LINK-4K-xxbefore 0.0.630.0.63Patch availableCNA
PTZOpticsPT20X-SE-xx-G3before 9.1.329.1.32Patch availableCNA
PTZOpticsPT20X-LINK-4K-xxbefore 0.0.890.0.89Patch availableCNA
PTZOpticsPT30X-SE-xx-G3before 9.1.339.1.33Patch availableCNA
PTZOpticsPT30X-LINK-4K-xxbefore 2.0.712.0.71Patch availableCNA
PTZOpticsPT-STUDIOPRObefore 9.0.419.0.41Patch availableCNA
PTZOpticsPT12X-STUDIO-4K-xx-G3before 8.1.908.1.90Patch availableCNA
PTZOpticsPT20X-STUDIO-4K-xx-G3before 8.1.908.1.90Patch availableCNA
PTZOpticsPT12X-SDI/NDI-xxbefore 6.3.706.3.70Patch availableCNA
PTZOpticsPT12X-USB-xxbefore 6.2.886.2.88Patch availableCNA
PTZOpticsPT20X-SDI/NDI-xxbefore 6.3.276.3.27Patch availableCNA
SMTAVPan-Tilt-Zoom Camerasall versions—No fix listedCNA
PTZOpticsPT30X-SDI/NDI-xxbefore 6.3.436.3.43Patch availableCNA
multiCAM SystemsPan-Tilt-Zoom Camerasall versions—No fix listedCNA
PTZOpticsVL Fixed Camera/NDI Fixed Camerabefore 7.2.947.2.94Patch availableCNA
PTZOptics12x Fixed Camera/NDI Fixed Camerabefore 7.2.857.2.85Patch availableCNA
PTZOptics20x Fixed Camera/NDI Fixed Camerabefore 7.2.947.2.94Patch availableCNA
PTZOpticsEPTZ Fixed Camera/NDI Fixed Camerabefore 8.1.898.1.89Patch availableCNA
PTZOpticsHC-EPTZ-NDIbefore 8.2.148.2.14Patch availableCNA
PTZOpticsPT12X-4K-xx-G3before 0.0.580.0.58Patch availableCNA
PTZOpticsPT20X-4K-xx-G3before 0.0.850.0.85Patch availableCNA
PTZOpticsPT30X-4K-xx-G3before 2.0.642.0.64Patch availableCNA
PTZOpticsPT20X-USB-xxbefore 6.2.816.2.81Patch availableCNA
ValueHDPan-Tilt-Zoom Camerasall versions—No fix listedCNA
  • PT12X-SE-xx-G3 VendorPTZOptics Affected before 9.1.43 Fixed in 9.1.43 Patch available CNA
  • PT12X-LINK-4K-xx VendorPTZOptics Affected before 0.0.63 Fixed in 0.0.63 Patch available CNA
  • PT20X-SE-xx-G3 VendorPTZOptics Affected before 9.1.32 Fixed in 9.1.32 Patch available CNA
  • PT20X-LINK-4K-xx VendorPTZOptics Affected before 0.0.89 Fixed in 0.0.89 Patch available CNA
  • PT30X-SE-xx-G3 VendorPTZOptics Affected before 9.1.33 Fixed in 9.1.33 Patch available CNA
  • PT30X-LINK-4K-xx VendorPTZOptics Affected before 2.0.71 Fixed in 2.0.71 Patch available CNA
  • PT-STUDIOPRO VendorPTZOptics Affected before 9.0.41 Fixed in 9.0.41 Patch available CNA
  • PT12X-STUDIO-4K-xx-G3 VendorPTZOptics Affected before 8.1.90 Fixed in 8.1.90 Patch available CNA
  • PT20X-STUDIO-4K-xx-G3 VendorPTZOptics Affected before 8.1.90 Fixed in 8.1.90 Patch available CNA
  • PT12X-SDI/NDI-xx VendorPTZOptics Affected before 6.3.70 Fixed in 6.3.70 Patch available CNA
  • PT12X-USB-xx VendorPTZOptics Affected before 6.2.88 Fixed in 6.2.88 Patch available CNA
  • PT20X-SDI/NDI-xx VendorPTZOptics Affected before 6.3.27 Fixed in 6.3.27 Patch available CNA
  • Pan-Tilt-Zoom Cameras VendorSMTAV Affected all versions Fixed in — No fix listed CNA
  • PT30X-SDI/NDI-xx VendorPTZOptics Affected before 6.3.43 Fixed in 6.3.43 Patch available CNA
  • Pan-Tilt-Zoom Cameras VendormultiCAM Systems Affected all versions Fixed in — No fix listed CNA
  • VL Fixed Camera/NDI Fixed Camera VendorPTZOptics Affected before 7.2.94 Fixed in 7.2.94 Patch available CNA
  • 12x Fixed Camera/NDI Fixed Camera VendorPTZOptics Affected before 7.2.85 Fixed in 7.2.85 Patch available CNA
  • 20x Fixed Camera/NDI Fixed Camera VendorPTZOptics Affected before 7.2.94 Fixed in 7.2.94 Patch available CNA
  • EPTZ Fixed Camera/NDI Fixed Camera VendorPTZOptics Affected before 8.1.89 Fixed in 8.1.89 Patch available CNA
  • HC-EPTZ-NDI VendorPTZOptics Affected before 8.2.14 Fixed in 8.2.14 Patch available CNA
  • PT12X-4K-xx-G3 VendorPTZOptics Affected before 0.0.58 Fixed in 0.0.58 Patch available CNA
  • PT20X-4K-xx-G3 VendorPTZOptics Affected before 0.0.85 Fixed in 0.0.85 Patch available CNA
  • PT30X-4K-xx-G3 VendorPTZOptics Affected before 2.0.64 Fixed in 2.0.64 Patch available CNA
  • PT20X-USB-xx VendorPTZOptics Affected before 6.2.81 Fixed in 6.2.81 Patch available CNA
  • Pan-Tilt-Zoom Cameras VendorValueHD Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 122

CPEVersionsRoleVendor
cpe:2.3:o:ptzoptics:pt12x-sdi-xx-g2_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerablePTZOptics
cpe:2.3:h:ptzoptics:pt12x-sdi-xx-g2:-:*:*:*:*:*:*:*not specified by NVDRunning onPTZOptics
cpe:2.3:o:ptzoptics:pt12x-ndi-xx_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerablePTZOptics
cpe:2.3:h:ptzoptics:pt12x-ndi-xx:-:*:*:*:*:*:*:*not specified by NVDRunning onPTZOptics
cpe:2.3:o:ptzoptics:pt12x-usb-xx-g2_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerablePTZOptics
cpe:2.3:h:ptzoptics:pt12x-usb-xx-g2:-:*:*:*:*:*:*:*not specified by NVDRunning onPTZOptics
cpe:2.3:o:ptzoptics:pt20x-sdi-xx-g2_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerablePTZOptics
cpe:2.3:h:ptzoptics:pt20x-sdi-xx-g2:-:*:*:*:*:*:*:*not specified by NVDRunning onPTZOptics
cpe:2.3:o:ptzoptics:t20x-ndi-xx_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerablePTZOptics
cpe:2.3:h:ptzoptics:t20x-ndi-xx:-:*:*:*:*:*:*:*not specified by NVDRunning onPTZOptics
  • cpe:2.3:o:ptzoptics:pt12x-sdi-xx-g2_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·PTZOptics
  • cpe:2.3:h:ptzoptics:pt12x-sdi-xx-g2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·PTZOptics
  • cpe:2.3:o:ptzoptics:pt12x-ndi-xx_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·PTZOptics
  • cpe:2.3:h:ptzoptics:pt12x-ndi-xx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·PTZOptics
  • cpe:2.3:o:ptzoptics:pt12x-usb-xx-g2_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·PTZOptics
  • cpe:2.3:h:ptzoptics:pt12x-usb-xx-g2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·PTZOptics
  • cpe:2.3:o:ptzoptics:pt20x-sdi-xx-g2_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·PTZOptics
  • cpe:2.3:h:ptzoptics:pt20x-sdi-xx-g2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·PTZOptics
  • cpe:2.3:o:ptzoptics:t20x-ndi-xx_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·PTZOptics
  • cpe:2.3:h:ptzoptics:t20x-ndi-xx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·PTZOptics
Show 112 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:ptzoptics:pt20x-usb-xx-g2_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerablePTZOptics
cpe:2.3:h:ptzoptics:pt20x-usb-xx-g2:-:*:*:*:*:*:*:*not specified by NVDRunning onPTZOptics
cpe:2.3:o:ptzoptics:pt30x-sdi-xx-g2_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerablePTZOptics
cpe:2.3:h:ptzoptics:pt30x-sdi-xx-g2:-:*:*:*:*:*:*:*not specified by NVDRunning onPTZOptics
cpe:2.3:o:ptzoptics:pt30x-ndi-xx_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerablePTZOptics
cpe:2.3:h:ptzoptics:pt30x-ndi-xx:-:*:*:*:*:*:*:*not specified by NVDRunning onPTZOptics
cpe:2.3:o:ptzoptics:pt12x-zcam_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerablePTZOptics
cpe:2.3:h:ptzoptics:pt12x-zcam:-:*:*:*:*:*:*:*not specified by NVDRunning onPTZOptics
cpe:2.3:o:ptzoptics:pt20x-zcam_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerablePTZOptics
cpe:2.3:h:ptzoptics:pt20x-zcam:-:*:*:*:*:*:*:*not specified by NVDRunning onPTZOptics
cpe:2.3:o:ptzoptics:ptvl-zcam_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerablePTZOptics
cpe:2.3:h:ptzoptics:ptvl-zcam:-:*:*:*:*:*:*:*not specified by NVDRunning onPTZOptics
cpe:2.3:o:ptzoptics:pteptz-zcam-g2_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerablePTZOptics
cpe:2.3:h:ptzoptics:pteptz-zcam-g2:-:*:*:*:*:*:*:*not specified by NVDRunning onPTZOptics
cpe:2.3:o:ptzoptics:pteptz-ndi-zcam-g2:-:*:*:*:*:*:*:*not specified by NVDVulnerablePTZOptics
cpe:2.3:h:ptzoptics:pteptz-ndi-zcam-g2:-:*:*:*:*:*:*:*not specified by NVDRunning onPTZOptics
cpe:2.3:o:ptzoptics:pt12x-4k-xx-g3_firmware:*:*:*:*:*:*:*:*up to 0.0.58VulnerablePTZOptics
cpe:2.3:h:ptzoptics:pt12x-4k-xx-g3:-:*:*:*:*:*:*:*not specified by NVDRunning onPTZOptics
cpe:2.3:o:ptzoptics:pt20x-4k-xx-g3_firmware:*:*:*:*:*:*:*:*up to 0.0.85VulnerablePTZOptics
cpe:2.3:h:ptzoptics:pt20x-4k-xx-g3:-:*:*:*:*:*:*:*not specified by NVDRunning onPTZOptics
cpe:2.3:o:ptzoptics:pt30x-4k-xx-g3_firmware:*:*:*:*:*:*:*:*up to 2.0.64VulnerablePTZOptics
cpe:2.3:h:ptzoptics:pt30x-4k-xx-g3:-:*:*:*:*:*:*:*not specified by NVDRunning onPTZOptics
cpe:2.3:o:ptzoptics:pt12x-link-4k-xx_firmware:*:*:*:*:*:*:*:*up to 0.0.63VulnerablePTZOptics
cpe:2.3:h:ptzoptics:pt12x-link-4k-xx:-:*:*:*:*:*:*:*not specified by NVDRunning onPTZOptics
cpe:2.3:o:ptzoptics:pt20x-link-4k-xx_firmware:*:*:*:*:*:*:*:*up to 0.0.89VulnerablePTZOptics
cpe:2.3:h:ptzoptics:pt20x-link-4k-xx:-:*:*:*:*:*:*:*not specified by NVDRunning onPTZOptics
cpe:2.3:o:ptzoptics:pt30x-link-4k-xx_firmware:*:*:*:*:*:*:*:*up to 2.0.71VulnerablePTZOptics
cpe:2.3:h:ptzoptics:pt30x-link-4k-xx:-:*:*:*:*:*:*:*not specified by NVDRunning onPTZOptics
cpe:2.3:o:ptzoptics:pt12x-se-xx-g3_firmware:*:*:*:*:*:*:*:*up to 9.1.43VulnerablePTZOptics
cpe:2.3:h:ptzoptics:pt12x-se-xx-g3:-:*:*:*:*:*:*:*not specified by NVDRunning onPTZOptics
cpe:2.3:o:ptzoptics:pt20x-se-xx-g3_firmware:*:*:*:*:*:*:*:*up to 9.1.32VulnerablePTZOptics
cpe:2.3:h:ptzoptics:pt20x-se-xx-g3:-:*:*:*:*:*:*:*not specified by NVDRunning onPTZOptics
cpe:2.3:o:ptzoptics:pt30x-se-xx-g3_firmware:*:*:*:*:*:*:*:*up to 9.1.33VulnerablePTZOptics
cpe:2.3:h:ptzoptics:pt30x-se-xx-g3:-:*:*:*:*:*:*:*not specified by NVDRunning onPTZOptics
cpe:2.3:o:ptzoptics:pt-studiopro_firmware:*:*:*:*:*:*:*:*up to 9.0.41VulnerablePTZOptics
cpe:2.3:h:ptzoptics:pt-studiopro:-:*:*:*:*:*:*:*not specified by NVDRunning onPTZOptics
cpe:2.3:o:ptzoptics:vl_fixed_camera_firmware:*:*:*:*:*:*:*:*up to 7.2.94VulnerablePTZOptics
cpe:2.3:h:ptzoptics:vl_fixed_camera:-:*:*:*:*:*:*:*not specified by NVDRunning onPTZOptics
cpe:2.3:o:ptzoptics:ndi_fixed_camera_firmware:*:*:*:*:*:*:*:*up to 7.2.94VulnerablePTZOptics
cpe:2.3:h:ptzoptics:ndi_fixed_camera:-:*:*:*:*:*:*:*not specified by NVDRunning onPTZOptics
cpe:2.3:o:multicam-systems:mcamii_ptz_firmware:*:*:*:*:*:*:*:*all versionsVulnerablemultiCAM Systems
cpe:2.3:h:multicam-systems:mcamii_ptz:-:*:*:*:*:*:*:*not specified by NVDRunning onmultiCAM Systems
cpe:2.3:o:smtav:ba30s_firmware:*:*:*:*:*:*:*:*all versionsVulnerableSMTAV
cpe:2.3:h:smtav:ba30s:-:*:*:*:*:*:*:*not specified by NVDRunning onSMTAV
cpe:2.3:o:smtav:ba20s_firmware:*:*:*:*:*:*:*:*all versionsVulnerableSMTAV
cpe:2.3:h:smtav:ba20s:-:*:*:*:*:*:*:*not specified by NVDRunning onSMTAV
cpe:2.3:o:smtav:bv20s_firmware:*:*:*:*:*:*:*:*all versionsVulnerableSMTAV
cpe:2.3:h:smtav:bv20s:-:*:*:*:*:*:*:*not specified by NVDRunning onSMTAV
cpe:2.3:o:smtav:bx30s_firmware:*:*:*:*:*:*:*:*all versionsVulnerableSMTAV
cpe:2.3:h:smtav:bx30s:-:*:*:*:*:*:*:*not specified by NVDRunning onSMTAV
cpe:2.3:o:smtav:bx20n_firmware:*:*:*:*:*:*:*:*all versionsVulnerableSMTAV
cpe:2.3:h:smtav:bx20n:-:*:*:*:*:*:*:*not specified by NVDRunning onSMTAV
cpe:2.3:o:smtav:bx20uhd-n_firmware:*:*:*:*:*:*:*:*all versionsVulnerableSMTAV
cpe:2.3:h:smtav:bx20uhd-n:-:*:*:*:*:*:*:*not specified by NVDRunning onSMTAV
cpe:2.3:o:smtav:bx20uhd_firmware:*:*:*:*:*:*:*:*all versionsVulnerableSMTAV
cpe:2.3:h:smtav:bx20uhd:-:*:*:*:*:*:*:*not specified by NVDRunning onSMTAV
cpe:2.3:o:smtav:ba30-n_firmware:*:*:*:*:*:*:*:*all versionsVulnerableSMTAV
cpe:2.3:h:smtav:ba30-n:-:*:*:*:*:*:*:*not specified by NVDRunning onSMTAV
cpe:2.3:o:smtav:ba20-n_firmware:*:*:*:*:*:*:*:*all versionsVulnerableSMTAV
cpe:2.3:h:smtav:ba20-n:-:*:*:*:*:*:*:*not specified by NVDRunning onSMTAV
cpe:2.3:o:smtav:ba12-n_firmware:*:*:*:*:*:*:*:*all versionsVulnerableSMTAV
cpe:2.3:h:smtav:ba12-n:-:*:*:*:*:*:*:*not specified by NVDRunning onSMTAV
cpe:2.3:o:smtav:hd17h-n_firmware:*:*:*:*:*:*:*:*all versionsVulnerableSMTAV
cpe:2.3:h:smtav:hd17h-n:-:*:*:*:*:*:*:*not specified by NVDRunning onSMTAV
cpe:2.3:o:smtav:bx20s-sh_firmware:*:*:*:*:*:*:*:*all versionsVulnerableSMTAV
cpe:2.3:h:smtav:bx20s-sh:-:*:*:*:*:*:*:*not specified by NVDRunning onSMTAV
cpe:2.3:o:smtav:hd17h_firmware:*:*:*:*:*:*:*:*all versionsVulnerableSMTAV
cpe:2.3:h:smtav:hd17h:-:*:*:*:*:*:*:*not specified by NVDRunning onSMTAV
cpe:2.3:o:smtav:bv30s_firmware:*:*:*:*:*:*:*:*all versionsVulnerableSMTAV
cpe:2.3:h:smtav:bv30s:-:*:*:*:*:*:*:*not specified by NVDRunning onSMTAV
cpe:2.3:o:smtav:ba12s_firmware:*:*:*:*:*:*:*:*all versionsVulnerableSMTAV
cpe:2.3:h:smtav:ba12s:-:*:*:*:*:*:*:*not specified by NVDRunning onSMTAV
cpe:2.3:o:valuehd:vx90_firmware:*:*:*:*:*:*:*:*all versionsVulnerableValueHD
cpe:2.3:h:valuehd:vx90:-:*:*:*:*:*:*:*not specified by NVDRunning onValueHD
cpe:2.3:o:valuehd:vx720l_firmware:*:*:*:*:*:*:*:*all versionsVulnerableValueHD
cpe:2.3:h:valuehd:vx720l:-:*:*:*:*:*:*:*not specified by NVDRunning onValueHD
cpe:2.3:o:valuehd:vx752ag_firmware:*:*:*:*:*:*:*:*all versionsVulnerableValueHD
cpe:2.3:h:valuehd:vx752ag:-:*:*:*:*:*:*:*not specified by NVDRunning onValueHD
cpe:2.3:o:valuehd:vx752a_firmware:*:*:*:*:*:*:*:*all versionsVulnerableValueHD
cpe:2.3:h:valuehd:vx752a:-:*:*:*:*:*:*:*not specified by NVDRunning onValueHD
cpe:2.3:o:valuehd:vx751ba_firmware:*:*:*:*:*:*:*:*all versionsVulnerableValueHD
cpe:2.3:h:valuehd:vx751ba:-:*:*:*:*:*:*:*not specified by NVDRunning onValueHD
cpe:2.3:o:valuehd:vx630al_firmware:*:*:*:*:*:*:*:*all versionsVulnerableValueHD
cpe:2.3:h:valuehd:vx630al:-:*:*:*:*:*:*:*not specified by NVDRunning onValueHD
cpe:2.3:o:valuehd:vx61asl_firmware:*:*:*:*:*:*:*:*all versionsVulnerableValueHD
cpe:2.3:h:valuehd:vx61asl:-:*:*:*:*:*:*:*not specified by NVDRunning onValueHD
cpe:2.3:o:valuehd:vx61basl_firmware:*:*:*:*:*:*:*:*all versionsVulnerableValueHD
cpe:2.3:h:valuehd:vx61basl:-:*:*:*:*:*:*:*not specified by NVDRunning onValueHD
cpe:2.3:o:valuehd:vx60asl_firmware:*:*:*:*:*:*:*:*all versionsVulnerableValueHD
cpe:2.3:h:valuehd:vx60asl:-:*:*:*:*:*:*:*not specified by NVDRunning onValueHD
cpe:2.3:o:valuehd:vx61al_firmware:*:*:*:*:*:*:*:*all versionsVulnerableValueHD
cpe:2.3:h:valuehd:vx61al:-:*:*:*:*:*:*:*not specified by NVDRunning onValueHD
cpe:2.3:o:valuehd:vx60al_firmware:*:*:*:*:*:*:*:*all versionsVulnerableValueHD
cpe:2.3:h:valuehd:vx60al:-:*:*:*:*:*:*:*not specified by NVDRunning onValueHD
cpe:2.3:o:valuehd:vx701ra_firmware:*:*:*:*:*:*:*:*all versionsVulnerableValueHD
cpe:2.3:h:valuehd:vx701ra:-:*:*:*:*:*:*:*not specified by NVDRunning onValueHD
cpe:2.3:o:valuehd:vx701ta_firmware:*:*:*:*:*:*:*:*all versionsVulnerableValueHD
cpe:2.3:h:valuehd:vx701ta:-:*:*:*:*:*:*:*not specified by NVDRunning onValueHD
cpe:2.3:o:valuehd:vx800i2_firmware:*:*:*:*:*:*:*:*all versionsVulnerableValueHD
cpe:2.3:h:valuehd:vx800i2:-:*:*:*:*:*:*:*not specified by NVDRunning onValueHD
cpe:2.3:o:valuehd:v61w_firmware:*:*:*:*:*:*:*:*all versionsVulnerableValueHD
cpe:2.3:h:valuehd:v61w:-:*:*:*:*:*:*:*not specified by NVDRunning onValueHD
cpe:2.3:o:valuehd:v63xl_firmware:*:*:*:*:*:*:*:*all versionsVulnerableValueHD
cpe:2.3:h:valuehd:v63xl:-:*:*:*:*:*:*:*not specified by NVDRunning onValueHD
cpe:2.3:o:valuehd:v60xl_firmware:*:*:*:*:*:*:*:*all versionsVulnerableValueHD
cpe:2.3:h:valuehd:v60xl:-:*:*:*:*:*:*:*not specified by NVDRunning onValueHD
cpe:2.3:o:valuehd:vx70uvs_firmware:*:*:*:*:*:*:*:*all versionsVulnerableValueHD
cpe:2.3:h:valuehd:vx70uvs:-:*:*:*:*:*:*:*not specified by NVDRunning onValueHD
cpe:2.3:o:valuehd:vx71uvs_firmware:*:*:*:*:*:*:*:*all versionsVulnerableValueHD
cpe:2.3:h:valuehd:vx71uvs:-:*:*:*:*:*:*:*not specified by NVDRunning onValueHD
cpe:2.3:o:valuehd:v71uvs_firmware:*:*:*:*:*:*:*:*all versionsVulnerableValueHD
cpe:2.3:h:valuehd:v71uvs:-:*:*:*:*:*:*:*not specified by NVDRunning onValueHD
  • cpe:2.3:o:ptzoptics:pt20x-usb-xx-g2_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·PTZOptics
  • cpe:2.3:h:ptzoptics:pt20x-usb-xx-g2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·PTZOptics
  • cpe:2.3:o:ptzoptics:pt30x-sdi-xx-g2_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·PTZOptics
  • cpe:2.3:h:ptzoptics:pt30x-sdi-xx-g2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·PTZOptics
  • cpe:2.3:o:ptzoptics:pt30x-ndi-xx_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·PTZOptics
  • cpe:2.3:h:ptzoptics:pt30x-ndi-xx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·PTZOptics
  • cpe:2.3:o:ptzoptics:pt12x-zcam_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·PTZOptics
  • cpe:2.3:h:ptzoptics:pt12x-zcam:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·PTZOptics
  • cpe:2.3:o:ptzoptics:pt20x-zcam_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·PTZOptics
  • cpe:2.3:h:ptzoptics:pt20x-zcam:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·PTZOptics
  • cpe:2.3:o:ptzoptics:ptvl-zcam_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·PTZOptics
  • cpe:2.3:h:ptzoptics:ptvl-zcam:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·PTZOptics
  • cpe:2.3:o:ptzoptics:pteptz-zcam-g2_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·PTZOptics
  • cpe:2.3:h:ptzoptics:pteptz-zcam-g2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·PTZOptics
  • cpe:2.3:o:ptzoptics:pteptz-ndi-zcam-g2:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·PTZOptics
  • cpe:2.3:h:ptzoptics:pteptz-ndi-zcam-g2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·PTZOptics
  • cpe:2.3:o:ptzoptics:pt12x-4k-xx-g3_firmware:*:*:*:*:*:*:*:* Versions up to 0.0.58 Vulnerable ·PTZOptics
  • cpe:2.3:h:ptzoptics:pt12x-4k-xx-g3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·PTZOptics
  • cpe:2.3:o:ptzoptics:pt20x-4k-xx-g3_firmware:*:*:*:*:*:*:*:* Versions up to 0.0.85 Vulnerable ·PTZOptics
  • cpe:2.3:h:ptzoptics:pt20x-4k-xx-g3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·PTZOptics
  • cpe:2.3:o:ptzoptics:pt30x-4k-xx-g3_firmware:*:*:*:*:*:*:*:* Versions up to 2.0.64 Vulnerable ·PTZOptics
  • cpe:2.3:h:ptzoptics:pt30x-4k-xx-g3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·PTZOptics
  • cpe:2.3:o:ptzoptics:pt12x-link-4k-xx_firmware:*:*:*:*:*:*:*:* Versions up to 0.0.63 Vulnerable ·PTZOptics
  • cpe:2.3:h:ptzoptics:pt12x-link-4k-xx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·PTZOptics
  • cpe:2.3:o:ptzoptics:pt20x-link-4k-xx_firmware:*:*:*:*:*:*:*:* Versions up to 0.0.89 Vulnerable ·PTZOptics
  • cpe:2.3:h:ptzoptics:pt20x-link-4k-xx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·PTZOptics
  • cpe:2.3:o:ptzoptics:pt30x-link-4k-xx_firmware:*:*:*:*:*:*:*:* Versions up to 2.0.71 Vulnerable ·PTZOptics
  • cpe:2.3:h:ptzoptics:pt30x-link-4k-xx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·PTZOptics
  • cpe:2.3:o:ptzoptics:pt12x-se-xx-g3_firmware:*:*:*:*:*:*:*:* Versions up to 9.1.43 Vulnerable ·PTZOptics
  • cpe:2.3:h:ptzoptics:pt12x-se-xx-g3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·PTZOptics
  • cpe:2.3:o:ptzoptics:pt20x-se-xx-g3_firmware:*:*:*:*:*:*:*:* Versions up to 9.1.32 Vulnerable ·PTZOptics
  • cpe:2.3:h:ptzoptics:pt20x-se-xx-g3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·PTZOptics
  • cpe:2.3:o:ptzoptics:pt30x-se-xx-g3_firmware:*:*:*:*:*:*:*:* Versions up to 9.1.33 Vulnerable ·PTZOptics
  • cpe:2.3:h:ptzoptics:pt30x-se-xx-g3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·PTZOptics
  • cpe:2.3:o:ptzoptics:pt-studiopro_firmware:*:*:*:*:*:*:*:* Versions up to 9.0.41 Vulnerable ·PTZOptics
  • cpe:2.3:h:ptzoptics:pt-studiopro:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·PTZOptics
  • cpe:2.3:o:ptzoptics:vl_fixed_camera_firmware:*:*:*:*:*:*:*:* Versions up to 7.2.94 Vulnerable ·PTZOptics
  • cpe:2.3:h:ptzoptics:vl_fixed_camera:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·PTZOptics
  • cpe:2.3:o:ptzoptics:ndi_fixed_camera_firmware:*:*:*:*:*:*:*:* Versions up to 7.2.94 Vulnerable ·PTZOptics
  • cpe:2.3:h:ptzoptics:ndi_fixed_camera:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·PTZOptics
  • cpe:2.3:o:multicam-systems:mcamii_ptz_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·multiCAM Systems
  • cpe:2.3:h:multicam-systems:mcamii_ptz:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·multiCAM Systems
  • cpe:2.3:o:smtav:ba30s_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·SMTAV
  • cpe:2.3:h:smtav:ba30s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·SMTAV
  • cpe:2.3:o:smtav:ba20s_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·SMTAV
  • cpe:2.3:h:smtav:ba20s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·SMTAV
  • cpe:2.3:o:smtav:bv20s_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·SMTAV
  • cpe:2.3:h:smtav:bv20s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·SMTAV
  • cpe:2.3:o:smtav:bx30s_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·SMTAV
  • cpe:2.3:h:smtav:bx30s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·SMTAV
  • cpe:2.3:o:smtav:bx20n_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·SMTAV
  • cpe:2.3:h:smtav:bx20n:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·SMTAV
  • cpe:2.3:o:smtav:bx20uhd-n_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·SMTAV
  • cpe:2.3:h:smtav:bx20uhd-n:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·SMTAV
  • cpe:2.3:o:smtav:bx20uhd_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·SMTAV
  • cpe:2.3:h:smtav:bx20uhd:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·SMTAV
  • cpe:2.3:o:smtav:ba30-n_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·SMTAV
  • cpe:2.3:h:smtav:ba30-n:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·SMTAV
  • cpe:2.3:o:smtav:ba20-n_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·SMTAV
  • cpe:2.3:h:smtav:ba20-n:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·SMTAV
  • cpe:2.3:o:smtav:ba12-n_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·SMTAV
  • cpe:2.3:h:smtav:ba12-n:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·SMTAV
  • cpe:2.3:o:smtav:hd17h-n_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·SMTAV
  • cpe:2.3:h:smtav:hd17h-n:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·SMTAV
  • cpe:2.3:o:smtav:bx20s-sh_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·SMTAV
  • cpe:2.3:h:smtav:bx20s-sh:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·SMTAV
  • cpe:2.3:o:smtav:hd17h_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·SMTAV
  • cpe:2.3:h:smtav:hd17h:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·SMTAV
  • cpe:2.3:o:smtav:bv30s_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·SMTAV
  • cpe:2.3:h:smtav:bv30s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·SMTAV
  • cpe:2.3:o:smtav:ba12s_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·SMTAV
  • cpe:2.3:h:smtav:ba12s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·SMTAV
  • cpe:2.3:o:valuehd:vx90_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·ValueHD
  • cpe:2.3:h:valuehd:vx90:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ValueHD
  • cpe:2.3:o:valuehd:vx720l_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·ValueHD
  • cpe:2.3:h:valuehd:vx720l:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ValueHD
  • cpe:2.3:o:valuehd:vx752ag_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·ValueHD
  • cpe:2.3:h:valuehd:vx752ag:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ValueHD
  • cpe:2.3:o:valuehd:vx752a_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·ValueHD
  • cpe:2.3:h:valuehd:vx752a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ValueHD
  • cpe:2.3:o:valuehd:vx751ba_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·ValueHD
  • cpe:2.3:h:valuehd:vx751ba:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ValueHD
  • cpe:2.3:o:valuehd:vx630al_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·ValueHD
  • cpe:2.3:h:valuehd:vx630al:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ValueHD
  • cpe:2.3:o:valuehd:vx61asl_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·ValueHD
  • cpe:2.3:h:valuehd:vx61asl:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ValueHD
  • cpe:2.3:o:valuehd:vx61basl_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·ValueHD
  • cpe:2.3:h:valuehd:vx61basl:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ValueHD
  • cpe:2.3:o:valuehd:vx60asl_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·ValueHD
  • cpe:2.3:h:valuehd:vx60asl:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ValueHD
  • cpe:2.3:o:valuehd:vx61al_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·ValueHD
  • cpe:2.3:h:valuehd:vx61al:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ValueHD
  • cpe:2.3:o:valuehd:vx60al_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·ValueHD
  • cpe:2.3:h:valuehd:vx60al:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ValueHD
  • cpe:2.3:o:valuehd:vx701ra_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·ValueHD
  • cpe:2.3:h:valuehd:vx701ra:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ValueHD
  • cpe:2.3:o:valuehd:vx701ta_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·ValueHD
  • cpe:2.3:h:valuehd:vx701ta:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ValueHD
  • cpe:2.3:o:valuehd:vx800i2_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·ValueHD
  • cpe:2.3:h:valuehd:vx800i2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ValueHD
  • cpe:2.3:o:valuehd:v61w_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·ValueHD
  • cpe:2.3:h:valuehd:v61w:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ValueHD
  • cpe:2.3:o:valuehd:v63xl_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·ValueHD
  • cpe:2.3:h:valuehd:v63xl:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ValueHD
  • cpe:2.3:o:valuehd:v60xl_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·ValueHD
  • cpe:2.3:h:valuehd:v60xl:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ValueHD
  • cpe:2.3:o:valuehd:vx70uvs_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·ValueHD
  • cpe:2.3:h:valuehd:vx70uvs:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ValueHD
  • cpe:2.3:o:valuehd:vx71uvs_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·ValueHD
  • cpe:2.3:h:valuehd:vx71uvs:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ValueHD
  • cpe:2.3:o:valuehd:v71uvs_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·ValueHD
  • cpe:2.3:h:valuehd:v71uvs:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ValueHD

Remediation

  • Fix · CNA PT12X-SE-xx-G3 (PTZOptics) Fixed in 9.1.43
  • Fix · CNA PT12X-LINK-4K-xx (PTZOptics) Fixed in 0.0.63
  • Fix · CNA PT20X-SE-xx-G3 (PTZOptics) Fixed in 9.1.32
  • Fix · CNA PT20X-LINK-4K-xx (PTZOptics) Fixed in 0.0.89
  • Fix · CNA PT30X-SE-xx-G3 (PTZOptics) Fixed in 9.1.33
  • Fix · CNA PT30X-LINK-4K-xx (PTZOptics) Fixed in 2.0.71
  • Fix · CNA PT-STUDIOPRO (PTZOptics) Fixed in 9.0.41
  • Fix · CNA PT12X-STUDIO-4K-xx-G3 (PTZOptics) Fixed in 8.1.90
  • Fix · CNA PT20X-STUDIO-4K-xx-G3 (PTZOptics) Fixed in 8.1.90
  • Fix · CNA PT12X-SDI/NDI-xx (PTZOptics) Fixed in 6.3.70
  • Fix · CNA PT12X-USB-xx (PTZOptics) Fixed in 6.2.88
  • Fix · CNA PT20X-SDI/NDI-xx (PTZOptics) Fixed in 6.3.27
  • Fix · CNA PT30X-SDI/NDI-xx (PTZOptics) Fixed in 6.3.43
  • Fix · CNA VL Fixed Camera/NDI Fixed Camera (PTZOptics) Fixed in 7.2.94
  • Fix · CNA 12x Fixed Camera/NDI Fixed Camera (PTZOptics) Fixed in 7.2.85
  • Fix · CNA 20x Fixed Camera/NDI Fixed Camera (PTZOptics) Fixed in 7.2.94
  • Fix · CNA EPTZ Fixed Camera/NDI Fixed Camera (PTZOptics) Fixed in 8.1.89
  • Fix · CNA HC-EPTZ-NDI (PTZOptics) Fixed in 8.2.14
  • Fix · CNA PT12X-4K-xx-G3 (PTZOptics) Fixed in 0.0.58
  • Fix · CNA PT20X-4K-xx-G3 (PTZOptics) Fixed in 0.0.85
  • Fix · CNA PT30X-4K-xx-G3 (PTZOptics) Fixed in 2.0.64
  • Fix · CNA PT20X-USB-xx (PTZOptics) Fixed in 6.2.81

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    PTZOptics 12x Fixed Camera/NDI Fixed Camera, 20x Fixed Camera/NDI Fixed Camera and 20 more products 0.0.58, 0.0.63 and 18 more versions

    2 records Highest priority Priority MEDIUM 2 MEDIUM

    Other records, highest priority first

    • TI-2025-24592 Pan-Tilt-Zoom cameras hard-coded default passwords with SSH and telnet enabledPriority MEDIUM 50

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-35452
  2. 2026-10-03 Alias added: GHSA-gx6v-756j-7g8w

References

Exploit 1

Patch 1

Advisory 3

  • TI-2025-24592 Pan-Tilt-Zoom cameras hard-coded default passwords with SSH and telnet enabled CVSS 4.0CRITICAL 9.3

Sources