PTZOptics vulnerabilities
We track 4 vulnerabilities in PTZOptics products across 60+ products. 4 are rated high or critical, and 2 have been exploited in real attacks. The most recent was published on September 30, 2026.
Latest PTZOptics vulnerabilities
- 9.1 Critical severity
Move 4K 12X: Missing Authentication for Critical Functionality
Missing authentication for critical function vulnerability for all PTZOptics cameras and the Firmware Upgrade Tool - Firmware Update modules. A missing authentication vulnerability in the firmware update mechanism of affected PTZOptics cameras allows an unauth
- 9.8 Critical severity
PT12X-SE-xx-G3: Use of Hard-coded Credentials
PTZOptics and possibly other ValueHD-based pan-tilt-zoom cameras use hard-coded, default administrative credentials. The passwords can readily be cracked. Many cameras have SSH or telnet listening on all interfaces. The passwords cannot be changed by the user,
- 7.2 High severity
PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Exploited
PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an OS command injection issue. The camera does not sufficiently validate the ntp_addr configuration value which may lead to arbitrary command execution when ntp_client is started. When chained
- 9.1 Critical severity
PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Exploited
PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an insufficient authentication issue. The camera does not properly enforce authentication to /cgi-bin/param.cgi when requests are sent without an HTTP Authorization header. The result is a remo