PTZOptics Camera Multiple Vulnrebilities (Sep 2024) - Active Check

PTZOptics Camera devices are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPEPREFIX = "cpe:/o:ptzoptics:"...

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-8957link is external PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability CVE-2024-8956link is external PTZOptics PT30X-SDI/NDI Cameras...

CVE-2024-8956

creationtimestamp| type| source ---|---|--- 2024-09-17 23:08:32+00:00| seen| https://t.me/cvedetector/5846 2024-09-17 23:58:54+00:00| seen| https://t.me/cvedetector/5858 2024-09-24 09:29:12+00:00| seen| https://t.me/CyberBulletin/876 2024-09-24 10:52:17+00:00| published-proof-of-concept|...

CVE-2024-8957

PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an OS command injection issue. The camera does not sufficiently validate the ntpaddr configuration value which may lead to arbitrary command execution when ntpclient is started. When chained with CVE-2024-8956, a remote and...