PTZOptics PT30X-SDI Firmware vulnerabilities

2 CVEs affecting PTZOptics PT30X-SDI Firmware, 2 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-8957, published 2024-09-17.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-8957: PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability, published 2024-09-17. High severity, CVSS 7.2. Actively exploited: in CISA KEV since 2024-11-04. EPSS: 79.8% chance of exploitation in the next 30 days. PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an OS command injection issue. The camera does not sufficiently validate the ntp_addr configuration value which may lead to…
CVE-2024-8956: PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability, published 2024-09-17. Critical severity, CVSS 9.1. Actively exploited: in CISA KEV since 2024-11-04. EPSS: 58.8% chance of exploitation in the next 30 days. PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an insufficient authentication issue. The camera does not properly enforce authentication to /cgi-bin/param.cgi when requests are…