CVE Watch—

CVE-2024-8957

PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability

CVSS

—

Sem CVSS

EPSS

79.8%

p100

KEV

SIM

4 de nov. de 2024

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

79.7%EPSS · 30 dias79.8%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

PTZOptics / PT30X-SDI/NDI Cameras

Vulnerabilidade

PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability

Adicionado ao KEV

4 de nov. de 2024

Corrigir até

25 de nov. de 2024

Uso conhecido em ransomware

Não

Descrição resumida

PTZOptics PT30X-SDI/NDI cameras contain an OS command injection vulnerability that allows a remote, authenticated attacker to escalate privileges to root via a crafted payload with the ntp_addr parameter of the /cgi-bin/param.cgi CGI script.

Ação necessária

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notas

https://ptzoptics.com/firmware-changelog/ ; https://nvd.nist.gov/vuln/detail/CVE-2024-8957

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2024-8956—

99.1%

KEV—80PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability—