PTZOptics Missing Authentication in Firmware Upload
28Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 9.1epss 0.4%
probabilidad de explotación
0.4%top 74% de las CVE
explotación observada
noninguna fuente lo reporta
Missing authentication for critical function vulnerability for all PTZOptics cameras and the Firmware Upgrade Tool - Firmware Update modules. A missing authentication vulnerability in the firmware update mechanism of affected PTZOptics cameras allows an unauthenticated user to install modified firmware on the device without administrator credentials.
This vulnerability allows attackers to upload modified firmware to the device without admin credentials. This issue affects:
* Move 4K 12X before: 0.0.98
* Move 4K 20X before: 0.1.33
* Move 4K 30X before: 2.1.17
* Link 4K 12X before: 0.0.99
* Link 4K 20X before: 0.1.37
* Link 4K 30X before: 2.1.18
* Move SE 12X before: 9.1.66
* Move SE 20X before: 9.1.44
* Move SE 30X before: 9.1.46
* Studio 4K 12X before: 8.3.32
* Studio 4K 20X before: 8.3.32
* Studio SE 12X before: 8.3.32
* Studio SE 20X before: 8.3.32
* All Generation 2 cameras, including: PT12X-SDI-GY-G2, PT12X-SDI-WH-G2, PT12X-NDI-GY-G2, PT12X-NDI-WH-G2; PT12X-USB-GY-G2, PT12X-USB-WH-G2; PT20X-SDI-GY-G2, PT20X-SDI-WH-G2, PT20X-NDI-GY-G2, PT20X-NDI-WH-G2; PT20X-USB-GY-G2, PT20X-USB-WH-G2; PT30X-SDI-GY-G2, PT30X-SDI-WH-G2, PT30X-NDI-GY-G2, PT30X-NDI-WH-G2; PTVL-ZCAM, PTVL-NDI-ZCAM; PTEPTZ-ZCAM-G2, PTEPTZ-NDI-ZCAM-G2; PT12X-ZCAM, PT12X-NDI-ZCAM; PT20X-ZCAM, PT20X-NDI-ZCAM; Studio Pro - All versions
* Upgrade Tool - All versions
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/R:U/V:C/RE:L/U:Red
Productos afectados
PTZOptics · Link 4K 12XPTZOptics · Link 4K 20XPTZOptics · Link 4K 30XPTZOptics · Move 4K 12XPTZOptics · Move 4K 20XPTZOptics · Move 4K 30XPTZOptics · Move SE 12XPTZOptics · Move SE 20XPTZOptics · Move SE 30XPTZOptics · PT12X-SDI-GY-G2, PT12X-SDI-WH-G2, PT12X-NDI-GY-G2, PT12X-NDI-WH-G2PTZOptics · PT12X-USB-GY-G2, PT12X-USB-WH-G2PTZOptics · PT12X-ZCAM, PT12X-NDI-ZCAMPTZOptics · PT20X-SDI-GY-G2, PT20X-SDI-WH-G2, PT20X-NDI-GY-G2, PT20X-NDI-WH-G2PTZOptics · PT20X-USB-GY-G2, PT20X-USB-WH-G2PTZOptics · PT20X-ZCAM, PT20X-NDI-ZCAMPTZOptics · PT30X-SDI-GY-G2, PT30X-SDI-WH-G2, PT30X-NDI-GY-G2, PT30X-NDI-WH-G2PTZOptics · PTEPTZ-ZCAM-G2, PTEPTZ-NDI-ZCAM-G2PTZOptics · PTVL-ZCAM, PTVL-NDI-ZCAMPTZOptics · Studio 4K 12XPTZOptics · Studio 4K 20XPTZOptics · Studio ProPTZOptics · Studio SE 12XPTZOptics · Studio SE 20XPTZOptics · Upgrade ToolReferencias
https://psirt.havsys.com/