CVEvulnerability

CVE-2025-35452

9.2 CRITICAL Published 2025-09-05 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2025-09-05
Last modified
2026-06-17
Assigner
9119a7d8-5eab-497f-8521-727c672e3725
CVSS 4.0 (9119a7d8-5eab-497f-8521-727c672e3725)
9.2 CRITICAL — CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1 (9119a7d8-5eab-497f-8521-727c672e3725)
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-1392, CWE-798

Description

PTZOptics and possibly other ValueHD-based pan-tilt-zoom cameras use default, shared credentials for the administrative web interface.

Affected configurations

• ptzoptics pt12x-sdi-xx-g2 firmware • ptzoptics pt12x-ndi-xx firmware • ptzoptics pt12x-usb-xx-g2 firmware • ptzoptics pt20x-sdi-xx-g2 firmware • ptzoptics t20x-ndi-xx firmware • ptzoptics pt20x-usb-xx-g2 firmware • ptzoptics pt30x-sdi-xx-g2 firmware • ptzoptics pt30x-ndi-xx firmware • ptzoptics pt12x-zcam firmware • ptzoptics pt20x-zcam firmware • ptzoptics ptvl-zcam firmware • ptzoptics pteptz-zcam-g2 firmware • ptzoptics pteptz-ndi-zcam-g2 • ptzoptics pt12x-4k-xx-g3 firmware (<= 0.0.58) • ptzoptics pt20x-4k-xx-g3 firmware (<= 0.0.85) • ptzoptics pt30x-4k-xx-g3 firmware (<= 2.0.64) • ptzoptics pt12x-link-4k-xx firmware (<= 0.0.63) • ptzoptics pt20x-link-4k-xx firmware (<= 0.0.89) • ptzoptics pt30x-link-4k-xx firmware (<= 2.0.71) • ptzoptics pt12x-se-xx-g3 firmware (<= 9.1.43) • ptzoptics pt20x-se-xx-g3 firmware (<= 9.1.32) • ptzoptics pt30x-se-xx-g3 firmware (<= 9.1.33) • ptzoptics pt-studiopro firmware (<= 9.0.41) • ptzoptics vl fixed camera firmware (<= 7.2.94) • ptzoptics ndi fixed camera firmware (<= 7.2.94) • multicam-systems mcamii ptz firmware • smtav ba30s firmware • smtav ba20s firmware • smtav bv20s firmware • smtav bx30s firmware • smtav bx20n firmware • smtav bx20uhd-n firmware • smtav bx20uhd firmware • smtav ba30-n firmware • smtav ba20-n firmware • smtav ba12-n firmware • smtav hd17h-n firmware • smtav bx20s-sh firmware • smtav hd17h firmware • smtav bv30s firmware • smtav ba12s firmware • valuehd vx90 firmware • valuehd vx720l firmware • valuehd vx752ag firmware • valuehd vx752a firmware • valuehd vx751ba firmware • valuehd vx630al firmware • valuehd vx61asl firmware • valuehd vx61basl firmware • valuehd vx60asl firmware • valuehd vx61al firmware • valuehd vx60al firmware • valuehd vx701ra firmware • valuehd vx701ta firmware • valuehd vx800i2 firmware • valuehd v61w firmware • valuehd v63xl firmware • valuehd v60xl firmware • valuehd vx70uvs firmware • valuehd vx71uvs firmware … and 1 more

Related

Weakness · CWE (2)

  • CWE-1392 Use of Default Credentials weakness
  • CWE-798 Use of Hard-coded Credentials weakness

References