Vulnerabilidades do PTZOptics PT30X-NDI
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam PTZOptics PT30X-NDI: 2 registro(s), com versões afetadas e correções.
CVE-2024-8957
Alta · 7.2
KEV Alta · 56 CWE-78 17/09/2024
PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability
PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an OS command injection issue. The camera does not sufficiently validate the ntp_addr configuration value which may lead to arbitrary command execution when ntp_client is started. When chained with CVE-2024-8956, a remote and unauthenticated attacker can execute arbitrary OS commands on affected devices.
CVE-2024-8956
Crítica · 9.1
KEV Alta · 63 CWE-287 17/09/2024
PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability
PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an insufficient authentication issue. The camera does not properly enforce authentication to /cgi-bin/param.cgi when requests are sent without an HTTP Authorization header. The result is a remote and unauthenticated attacker can leak sensitive data such as usernames, password hashes, and configurations details. Additionally, the attacker can update individual configuration values or overwrite the whole file.