CVE-2025-35451
criticalEPSS 0.008 · 55 %ileEUUSEPSS · scored 2026-10-20
PTZOptics and possibly other ValueHD-based pan-tilt-zoom cameras use hard-coded, default administrative credentials. The passwords can readily be cracked. Many cameras have SSH or telnet listening on all interfaces. The passwords cannot be changed by the user, nor can the SSH or telnet service be disabled by the user.
remediations
Vendor fix, mitigation, or workaround guidance, as published by each source.
No vendor fix yet; a mitigation is available.
- MitigationPTZOptics PT12X-NDI-xxcisa_csaf_ot
ValueHD, multiCAM Systems, and SMTAV did not respond to requests for coordination. Please contact the respective companies through the following means for more information:
- MitigationPTZOptics PT12X-SDI-xx-G2cisa_csaf_ot
ValueHD, multiCAM Systems, and SMTAV did not respond to requests for coordination. Please contact the respective companies through the following means for more information:
- MitigationPTZOptics PT12X-USB-xx-G2cisa_csaf_ot
ValueHD, multiCAM Systems, and SMTAV did not respond to requests for coordination. Please contact the respective companies through the following means for more information:
- MitigationPTZOptics PT12X-ZCAMcisa_csaf_ot
ValueHD, multiCAM Systems, and SMTAV did not respond to requests for coordination. Please contact the respective companies through the following means for more information:
- MitigationPTZOptics PT20X-NDI-xxcisa_csaf_ot
ValueHD, multiCAM Systems, and SMTAV did not respond to requests for coordination. Please contact the respective companies through the following means for more information:
- MitigationPTZOptics PT20X-SDI-xx-G2cisa_csaf_ot
ValueHD, multiCAM Systems, and SMTAV did not respond to requests for coordination. Please contact the respective companies through the following means for more information:
- MitigationPTZOptics PT20X-USB-xx-G2cisa_csaf_ot
ValueHD, multiCAM Systems, and SMTAV did not respond to requests for coordination. Please contact the respective companies through the following means for more information:
- MitigationPTZOptics PT20X-ZCAMcisa_csaf_ot
ValueHD, multiCAM Systems, and SMTAV did not respond to requests for coordination. Please contact the respective companies through the following means for more information:
- MitigationPTZOptics PT30X-NDI-xxcisa_csaf_ot
ValueHD, multiCAM Systems, and SMTAV did not respond to requests for coordination. Please contact the respective companies through the following means for more information:
- MitigationPTZOptics PT30X-SDI-xx-G2cisa_csaf_ot
ValueHD, multiCAM Systems, and SMTAV did not respond to requests for coordination. Please contact the respective companies through the following means for more information:
- MitigationPTZOptics PTEPTZ-NDI-ZCAM-G2cisa_csaf_ot
ValueHD, multiCAM Systems, and SMTAV did not respond to requests for coordination. Please contact the respective companies through the following means for more information:
- MitigationPTZOptics PTEPTZ-ZCAM-G2cisa_csaf_ot
ValueHD, multiCAM Systems, and SMTAV did not respond to requests for coordination. Please contact the respective companies through the following means for more information:
- MitigationPTZOptics PTVL-ZCAMcisa_csaf_ot
ValueHD, multiCAM Systems, and SMTAV did not respond to requests for coordination. Please contact the respective companies through the following means for more information:
- MitigationPTZOptics PTZOptics VL Fixed Camera/NDI Fixed Cameracisa_csaf_ot
ValueHD, multiCAM Systems, and SMTAV did not respond to requests for coordination. Please contact the respective companies through the following means for more information:
- MitigationSMTAV Pan-Tilt-Zoom Camerascisa_csaf_ot
ValueHD, multiCAM Systems, and SMTAV did not respond to requests for coordination. Please contact the respective companies through the following means for more information:
- MitigationValueHD Pan-Tilt-Zoom Camerascisa_csaf_ot
ValueHD, multiCAM Systems, and SMTAV did not respond to requests for coordination. Please contact the respective companies through the following means for more information:
- MitigationmultiCAM Systems Pan-Tilt-Zoom Camerascisa_csaf_ot
ValueHD, multiCAM Systems, and SMTAV did not respond to requests for coordination. Please contact the respective companies through the following means for more information:
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · high–critical · 8.1–9.8
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (130)
Products and version ranges known to be affected.
advisories (1)
Vendor and ecosystem advisories describing this.
- ICSA-25-162-10PTZOptics and Other Pan-Tilt-Zoom Cameras2025-06-12icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities could allow an attacker to leak sensitive data, execute arbitrary commands, and access the admin web interface using hard-coded credentials.
also known as (3)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (16)
External citations — patches, advisories, analysis.
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-162-10.jsoncnnvd
- https://ptzoptics.com/known-vulnerabilities-and-fixes/Patchcnnvd
- https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-10cnnvd
- https://www.cve.org/CVERecord?id=CVE-2025-35451cnnvd
- https://www.greynoise.io/blog/greynoise-intelligence-discovers-zero-day-vulnerabilities-in-live-streaming-cameras-with-the-help-of-aicnnvd
- https://www.labs.greynoise.io/grimoire/2024-10-31-sift-0-day-rce/cnnvd
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-162-10.jsonenisa_euvd
- https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-10enisa_euvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan