CVE-2025-35451
criticalEPSS 0.008 · 55. PerzentilEUUSEPSS · bewertet 2026-10-20
PTZOptics and possibly other ValueHD-based pan-tilt-zoom cameras use hard-coded, default administrative credentials. The passwords can readily be cracked. Many cameras have SSH or telnet listening on all interfaces. The passwords cannot be changed by the user, nor can the SSH or telnet service be disabled by the user.
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Noch kein Hersteller-Fix; eine Mitigation ist verfügbar.
- MitigationPTZOptics PT12X-NDI-xxcisa_csaf_ot
ValueHD, multiCAM Systems, and SMTAV did not respond to requests for coordination. Please contact the respective companies through the following means for more information:
- MitigationPTZOptics PT12X-SDI-xx-G2cisa_csaf_ot
ValueHD, multiCAM Systems, and SMTAV did not respond to requests for coordination. Please contact the respective companies through the following means for more information:
- MitigationPTZOptics PT12X-USB-xx-G2cisa_csaf_ot
ValueHD, multiCAM Systems, and SMTAV did not respond to requests for coordination. Please contact the respective companies through the following means for more information:
- MitigationPTZOptics PT12X-ZCAMcisa_csaf_ot
ValueHD, multiCAM Systems, and SMTAV did not respond to requests for coordination. Please contact the respective companies through the following means for more information:
- MitigationPTZOptics PT20X-NDI-xxcisa_csaf_ot
ValueHD, multiCAM Systems, and SMTAV did not respond to requests for coordination. Please contact the respective companies through the following means for more information:
- MitigationPTZOptics PT20X-SDI-xx-G2cisa_csaf_ot
ValueHD, multiCAM Systems, and SMTAV did not respond to requests for coordination. Please contact the respective companies through the following means for more information:
- MitigationPTZOptics PT20X-USB-xx-G2cisa_csaf_ot
ValueHD, multiCAM Systems, and SMTAV did not respond to requests for coordination. Please contact the respective companies through the following means for more information:
- MitigationPTZOptics PT20X-ZCAMcisa_csaf_ot
ValueHD, multiCAM Systems, and SMTAV did not respond to requests for coordination. Please contact the respective companies through the following means for more information:
- MitigationPTZOptics PT30X-NDI-xxcisa_csaf_ot
ValueHD, multiCAM Systems, and SMTAV did not respond to requests for coordination. Please contact the respective companies through the following means for more information:
- MitigationPTZOptics PT30X-SDI-xx-G2cisa_csaf_ot
ValueHD, multiCAM Systems, and SMTAV did not respond to requests for coordination. Please contact the respective companies through the following means for more information:
- MitigationPTZOptics PTEPTZ-NDI-ZCAM-G2cisa_csaf_ot
ValueHD, multiCAM Systems, and SMTAV did not respond to requests for coordination. Please contact the respective companies through the following means for more information:
- MitigationPTZOptics PTEPTZ-ZCAM-G2cisa_csaf_ot
ValueHD, multiCAM Systems, and SMTAV did not respond to requests for coordination. Please contact the respective companies through the following means for more information:
- MitigationPTZOptics PTVL-ZCAMcisa_csaf_ot
ValueHD, multiCAM Systems, and SMTAV did not respond to requests for coordination. Please contact the respective companies through the following means for more information:
- MitigationPTZOptics PTZOptics VL Fixed Camera/NDI Fixed Cameracisa_csaf_ot
ValueHD, multiCAM Systems, and SMTAV did not respond to requests for coordination. Please contact the respective companies through the following means for more information:
- MitigationSMTAV Pan-Tilt-Zoom Camerascisa_csaf_ot
ValueHD, multiCAM Systems, and SMTAV did not respond to requests for coordination. Please contact the respective companies through the following means for more information:
- MitigationValueHD Pan-Tilt-Zoom Camerascisa_csaf_ot
ValueHD, multiCAM Systems, and SMTAV did not respond to requests for coordination. Please contact the respective companies through the following means for more information:
- MitigationmultiCAM Systems Pan-Tilt-Zoom Camerascisa_csaf_ot
ValueHD, multiCAM Systems, and SMTAV did not respond to requests for coordination. Please contact the respective companies through the following means for more information:
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · high–critical · 8.1–9.8
SSVC
Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (130)
Betroffene Produkte und Versionsbereiche.
Advisories (1)
Hersteller- und Ökosystem-Meldungen dazu.
- ICSA-25-162-10PTZOptics and Other Pan-Tilt-Zoom Cameras2025-06-12icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities could allow an attacker to leak sensitive data, execute arbitrary commands, and access the admin web interface using hard-coded credentials.
auch bekannt als (3)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (16)
Externe Belege — Patches, Meldungen, Analysen.
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-162-10.jsoncnnvd
- https://ptzoptics.com/known-vulnerabilities-and-fixes/Patchcnnvd
- https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-10cnnvd
- https://www.cve.org/CVERecord?id=CVE-2025-35451cnnvd
- https://www.greynoise.io/blog/greynoise-intelligence-discovers-zero-day-vulnerabilities-in-live-streaming-cameras-with-the-help-of-aicnnvd
- https://www.labs.greynoise.io/grimoire/2024-10-31-sift-0-day-rce/cnnvd
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-162-10.jsonenisa_euvd
- https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-10enisa_euvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan