CVEvulnerability

CVE-2025-35451

9.3 CRITICAL Published 2025-09-05 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2025-09-05
Last modified
2026-06-17
Assigner
9119a7d8-5eab-497f-8521-727c672e3725
CVSS 4.0 (9119a7d8-5eab-497f-8521-727c672e3725)
9.3 CRITICAL — CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1 (9119a7d8-5eab-497f-8521-727c672e3725)
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-798

Description

PTZOptics and possibly other ValueHD-based pan-tilt-zoom cameras use hard-coded, default administrative credentials. The passwords can readily be cracked. Many cameras have SSH or telnet listening on all interfaces. The passwords cannot be changed by the user, nor can the SSH or telnet service be disabled by the user.

Affected configurations

• ptzoptics pt12x-sdi-xx-g2 firmware (<= 6.3.34) • ptzoptics pt12x-ndi-xx firmware (<= 6.3.34) • ptzoptics pt12x-usb-xx-g2 firmware (<= 6.2.81) • ptzoptics pt20x-sdi-xx-g2 firmware (<= 6.3.20) • ptzoptics pt20x-ndi-xx firmware (<= 6.3.20) • ptzoptics pt20x-usb-xx-g2 firmware (<= 6.2.73) • ptzoptics pt30x-sdi-xx-g2 firmware (<= 6.3.30) • ptzoptics pt30x-ndi-xx firmware (<= 6.3.30) • ptzoptics pt12x-zcam firmware (<= 7.2.76) • ptzoptics pt20x-zcam firmware (<= 7.2.82) • ptzoptics ptvl-zcam firmware (<= 7.2.79) • ptzoptics pteptz-zcam-g2 firmware (<= 8.1.81) • ptzoptics pteptz-ndi-zcam-g2 firmware (<= 8.1.81) • ptzoptics vl fixed camera firmware (<= 7.2.94) • ptzoptics ndi fixed camera firmware (<= 7.2.94) • multicam-systems mcamii ptz firmware • smtav ba30s firmware • smtav ba20s firmware • smtav bv20s firmware • smtav bx30s firmware • smtav bx20n firmware • smtav bx20uhd-n firmware • smtav bx20uhd firmware • smtav ba30-n firmware • smtav ba20-n firmware • smtav ba12-n firmware • smtav hd17h-n firmware • smtav bx20s-sh firmware • smtav hd17h firmware • smtav bv30s firmware • smtav ba12s firmware • valuehd vx90 firmware • valuehd vx720l firmware • valuehd vx752ag firmware • valuehd vx752a firmware • valuehd vx751ba firmware • valuehd vx630al firmware • valuehd vx61asl firmware • valuehd vx61basl firmware • valuehd vx60asl firmware • valuehd vx61al firmware • valuehd vx60al firmware • valuehd vx701ra firmware • valuehd vx701ta firmware • valuehd vx800i2 firmware • valuehd v61w firmware • valuehd v63xl firmware • valuehd v60xl firmware • valuehd vx70uvs firmware • valuehd vx71uvs firmware • valuehd v71uvs firmware

Related

Weakness · CWE (1)

  • CWE-798 Use of Hard-coded Credentials weakness

References