PT30X-NDI vulnerabilities

2 known vulnerabilities in PT30X-NDI from PTZOptics. 2 are rated high or critical, and 2 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Exploited

  CVE-2024-8957Sep 17, 2024PTZOpticsEPSS 79.8%

  PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an OS command injection issue. The camera does not sufficiently validate the ntp_addr configuration value which may lead to arbitrary command execution when ntp_client is started. When chained

• 9.1 Critical severity

  PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Exploited

  CVE-2024-8956Sep 17, 2024PTZOpticsEPSS 58.8%

  PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an insufficient authentication issue. The camera does not properly enforce authentication to /cgi-bin/param.cgi when requests are sent without an HTTP Authorization header. The result is a remo