Most Exploited Internet-Facing Products

MEIFP

Back to Ranking

PTZOptics

Products: PT30X-NDI · PT30X-SDI

64.6

Score

2

CVEs

2

Active

0

PoC

2

KEV

#46

Rank

Period:

Product:

CVE ID	Published	CVSS	Exploit	KEV	AC	PR	Auto	Score(hover)	Affected Products	Description
CVE-2024-8956	2024-09-17	9.1v3.1	ACTIVE		Low	None	YES	40.6	PT30X-NDIPT30X-SDI	PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an insufficient authentication issue. The camera does not properly enforce authentication to /cgi-bin/param.cgi when requests are sent without an HTTP Authorization header. The result is a remote and unauthenticated attacker can leak
CVE-2024-8957	2024-09-17	7.2v3.1	ACTIVE		Low	High	no	24.0	PT30X-NDIPT30X-SDI	PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an OS command injection issue. The camera does not sufficiently validate the ntp_addr configuration value which may lead to arbitrary command execution when ntp_client is started. When chained with CVE-2024-8956, a remote and unauthe

Each CVE: 10 pts base (Active only), boosted by:

KEV×2.0AC: Low×1.2PR: None×1.3PR: Low×1.1Auto×1.3