by Kastro CVE-2025-35451
PTZOptics PT12X-SE-xx-G3 — Pan-Tilt-Zoom cameras hard-coded default passwords with SSH and telnet enabled
Description · from the CVE record
PTZOptics and possibly other ValueHD-based pan-tilt-zoom cameras use hard-coded, default administrative credentials. The passwords can readily be cracked. Many cameras have SSH or telnet listening on all interfaces. The passwords cannot be changed by the user, nor can the SSH or telnet service be disabled by the user.
Affected
ProductAffectedFixed inSource
PT12X-SE-xx-G3< 9.1.439.1.43CNA
PT12X-LINK-4K-xx< 0.0.630.0.63CNA
PT20X-SE-xx-G3< 9.1.329.1.32CNA
PT20X-LINK-4K-xx< 0.0.890.0.89CNA
PT-STUDIOPRO< 9.0.419.0.41CNA
PT30X-SE-xx-G3< 9.1.339.1.33CNA
PT30X-LINK-4K-xx< 2.0.712.0.71CNA
PT12X-STUDIO-4K-xx-G3< 8.1.908.1.90CNA
PT20X-STUDIO-4K-xx-G3< 8.1.908.1.90CNA
PT12X-SDI/NDI-xx< 6.3.706.3.70CNA
PT12X-USB-xx< 6.2.886.2.88CNA
PT20X-SDI/NDI-xx< 6.3.276.3.27CNA
Scores by source
cisa-cg (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
cisa-cg (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total