Known exploited vulnerabilities

PTZOptics vulnerabilities attackers have used

Every PTZOptics vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first, with the federal due date and whether it fed ransomware campaigns.

The short answer

CISA lists 2 PTZOptics vulnerabilities as exploited in the wild, 0 of them added in the last 12 months. The most recent is CVE-2024-8957, added Nov 4, 2024. PT30X-SDI/NDI Cameras has the most entries (2).

In KEV, all time
2
Added, last 12 months
0
Used in ransomware
0
New CVEs this week
0

Every PTZOptics entry in CISA KEV

  1. CVE-2024-8957

    Added · due

    PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability

    PTZOptics PT30X-SDI/NDI cameras contain an OS command injection vulnerability that allows a remote, authenticated attacker to escalate privileges to root via a crafted payload with the ntp_addr parameter of the /cgi-bin/param.cgi CGI…

  2. CVE-2024-8956

    Added · due

    PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability

    PTZOptics PT30X-SDI/NDI cameras contain an insecure direct object reference (IDOR) vulnerability that allows a remote, attacker to bypass authentication for the /cgi-bin/param.cgi CGI script. If combined with CVE-2024-8957, this can lead…

Related

Know the day a CVE lands in your code

Connect a GitHub repository and ZeusQA checks its dependencies daily, briefs each advisory and opens the fix. Three test runs free, no card.