CVE Database
/

CVE-2025-35451

Back to search

CVE-2025-35451

Published: Sep 5, 2025

Modified: Sep 8, 2025

PUBLISHED

CVSS v3.1

9.8

CRITICAL

Description

PTZOptics and possibly other ValueHD-based pan-tilt-zoom cameras use hard-coded, default administrative credentials. The passwords can readily be cracked. Many cameras have SSH or telnet listening on all interfaces. The passwords cannot be changed by the user, nor can the SSH or telnet service be disabled by the user.

VendorProductVersions

PTZOptics

PT12X-SE-xx-G3

affected
0 - < 9.1.43
unaffected
9.1.43

PTZOptics

PT12X-LINK-4K-xx

affected
0 - < 0.0.63
unaffected
0.0.63

PTZOptics

PT20X-SE-xx-G3

affected
0 - < 9.1.32
unaffected
9.1.32

PTZOptics

PT20X-LINK-4K-xx

affected
0 - < 0.0.89
unaffected
0.0.89

PTZOptics

PT-STUDIOPRO

affected
0 - < 9.0.41
unaffected
9.0.41

PTZOptics

PT30X-SE-xx-G3

affected
0 - < 9.1.33
unaffected
9.1.33

PTZOptics

PT30X-LINK-4K-xx

affected
0 - < 2.0.71
unaffected
2.0.71

PTZOptics

PT12X-STUDIO-4K-xx-G3

affected
0 - < 8.1.90
unaffected
8.1.90

PTZOptics

PT20X-STUDIO-4K-xx-G3

affected
0 - < 8.1.90
unaffected
8.1.90

PTZOptics

PT12X-SDI/NDI-xx

affected
0 - < 6.3.70
unaffected
6.3.70

PTZOptics

PT12X-USB-xx

affected
0 - < 6.2.88
unaffected
6.2.88

PTZOptics

PT20X-SDI/NDI-xx

affected
0 - < 6.3.27
unaffected
6.3.27

SMTAV

Pan-Tilt-Zoom Cameras

affected
*

PTZOptics

PT30X-SDI/NDI-xx

affected
0 - < 6.3.43
unaffected
6.3.43

multiCAM Systems

Pan-Tilt-Zoom Cameras

affected
*

PTZOptics

VL Fixed Camera/NDI Fixed Camera

affected
0 - < 7.2.94
unaffected
7.2.94

PTZOptics

12x Fixed Camera/NDI Fixed Camera

affected
0 - < 7.2.85
unaffected
7.2.85

PTZOptics

20x Fixed Camera/NDI Fixed Camera

affected
0 - < 7.2.94
unaffected
7.2.94

PTZOptics

EPTZ Fixed Camera/NDI Fixed Camera

affected
0 - < 8.1.89
unaffected
8.1.89

PTZOptics

HC-EPTZ-NDI

affected
0 - < 8.2.14
unaffected
8.2.14

PTZOptics

PT12X-4K-xx-G3

affected
0 - < 0.0.58
unaffected
0.0.58

PTZOptics

PT20X-4K-xx-G3

affected
0 - < 0.0.85
unaffected
0.0.85

PTZOptics

PT20X-USB-xx

affected
0 - < 6.2.81
unaffected
6.2.81

PTZOptics

PT30X-4K-xx-G3

affected
0 - < 2.0.64
unaffected
2.0.64

ValueHD

Pan-Tilt-Zoom Cameras

affected
*

Weaknesses (CWE)

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now