Known exploited vulnerabilities
PTZOptics vulnerabilities attackers have used
Every PTZOptics vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first, with the federal due date and whether it fed ransomware campaigns.
The short answer
CISA lists 2 PTZOptics vulnerabilities as exploited in the wild, 0 of them added in the last 12 months. The most recent is CVE-2024-8957, added Nov 4, 2024. PT30X-SDI/NDI Cameras has the most entries (2).
- In KEV, all time
- 2
- Added, last 12 months
- 0
- Used in ransomware
- 0
- New CVEs this week
- 0
Every PTZOptics entry in CISA KEV
CVE-2024-8957
Added · duePTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability
PTZOptics PT30X-SDI/NDI cameras contain an OS command injection vulnerability that allows a remote, authenticated attacker to escalate privileges to root via a crafted payload with the ntp_addr parameter of the /cgi-bin/param.cgi CGI…
CVE-2024-8956
Added · duePTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability
PTZOptics PT30X-SDI/NDI cameras contain an insecure direct object reference (IDOR) vulnerability that allows a remote, attacker to bypass authentication for the /cgi-bin/param.cgi CGI script. If combined with CVE-2024-8957, this can lead…
Related
Know the day a CVE lands in your code
Connect a GitHub repository and ZeusQA checks its dependencies daily, briefs each advisory and opens the fix. Three test runs free, no card.