by Kastro
Paper/Archive/CVE-2024-8956

CVE-2024-8956

PTZOptics PT30X-SDI — PTZOptics NDI and SDI Cameras /cgi-bin/param.cgi Insufficient Authentication

KEV · due 25 NovEPSS 59%public exploitSSVC actCVSS 9.1
critical.is priorityof 100
97
CVSS 9.1 (CNA)9.1 / 10 × 3027.3In CISA KEV+3030.0EPSS percentile 99.1.991 × 2019.8Exploit: SSVC active+1010.0SSVC exploitation: active+1010.0
Description · from the CVE record

PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an insufficient authentication issue. The camera does not properly enforce authentication to /cgi-bin/param.cgi when requests are sent without an HTTP Authorization header. The result is a remote and unauthenticated attacker can leak sensitive data such as usernames, password hashes, and configurations details. Additionally, the attacker can update individual configuration values or overwrite the whole file.

Affected

ProductAffectedFixed inSource
PT30X-SDI< 6.3.406.3.40CNA
PT30X-NDI< 6.3.406.3.40CNA
pt30x-sdi_firmware< 6.3.406.3.40CISA-ADP
pt30x-ndi-xx-g2_firmware< 6.3.406.3.40CISA-ADP

Scores by source

VulnCheck (CNA)9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CISA ADPSSVCExploitation: active · Automatable: yes · Technical impact: total

References

advisoryptzoptics.com/firmware-changelogwriteupvulncheck.com/advisories/ptzoptics-insufficient-authexploitlabs.greynoise.io/grimoire/2024-10-31-sift-0-day-rcewriteupgreynoise.io/blog/greynoise-intelligence-discovers-zero-day-vulnerabilities-in-live-streaming-cameras-with-the-help-of-airefcisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-8956kevcisa.gov/known-exploited-vulnerabilities-catalog