Log in Start free

Vulnerability · Published Sep 5, 2025 · Assigned by cisa-cg

CVE-2025-35452Pan-Tilt-Zoom cameras default administrative credentials for web interface

Critical 9.8

In plain English

A critical-severity hard-coded credentials in Pan-Tilt-Zoom Cameras from multiCAM Systems. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 59% of all known vulnerabilities).

Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)0.9%top 40.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

PTZOptics and possibly other ValueHD-based pan-tilt-zoom cameras use default, shared credentials for the administrative web interface.

Affected products (as reported)

VendorProductVersions
PTZOptics PT12X-SE-xx-G3 0 – before 9.1.43
PTZOptics PT12X-LINK-4K-xx 0 – before 0.0.63
PTZOptics PT20X-SE-xx-G3 0 – before 9.1.32
PTZOptics PT20X-LINK-4K-xx 0 – before 0.0.89
PTZOptics PT30X-SE-xx-G3 0 – before 9.1.33
PTZOptics PT30X-LINK-4K-xx 0 – before 2.0.71
PTZOptics PT-STUDIOPRO 0 – before 9.0.41
PTZOptics PT12X-STUDIO-4K-xx-G3 0 – before 8.1.90
PTZOptics PT20X-STUDIO-4K-xx-G3 0 – before 8.1.90
PTZOptics PT12X-SDI/NDI-xx 0 – before 6.3.70
PTZOptics PT12X-USB-xx 0 – before 6.2.88
PTZOptics PT20X-SDI/NDI-xx 0 – before 6.3.27
SMTAV Pan-Tilt-Zoom Cameras *
PTZOptics PT30X-SDI/NDI-xx 0 – before 6.3.43
multiCAM Systems Pan-Tilt-Zoom Cameras *
PTZOptics VL Fixed Camera/NDI Fixed Camera 0 – before 7.2.94
PTZOptics 12x Fixed Camera/NDI Fixed Camera 0 – before 7.2.85
PTZOptics 20x Fixed Camera/NDI Fixed Camera 0 – before 7.2.94
PTZOptics EPTZ Fixed Camera/NDI Fixed Camera 0 – before 8.1.89
PTZOptics HC-EPTZ-NDI 0 – before 8.2.14
PTZOptics PT12X-4K-xx-G3 0 – before 0.0.58
PTZOptics PT20X-4K-xx-G3 0 – before 0.0.85
PTZOptics PT30X-4K-xx-G3 0 – before 2.0.64
PTZOptics PT20X-USB-xx 0 – before 6.2.81
ValueHD Pan-Tilt-Zoom Cameras *

Weakness: CWE-798, CWE-1392 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References