CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2024-09-17
PTZOptics PT30X Cameras OS Command Injection Vulnerability Analysis and Mitigation Guide (CVE-2024-8957)
[Affected Scope] PTZOptics PT30X-SDI/NDI-xx camera devices running firmware versions prior to 6.3.40
[Impact] Attackers can manipulate the 'ntp_addr' configuration to execute arbitrary OS commands with system privileges when 'ntp_client' starts, which can lead to unauthenticated remote code execution when chained with CVE-2024-8956
[Mitigation] Immediately upgrade the camera firmware to version 6.3.40 or later via the official PTZOptics portal and restrict network access