Skip to content
COOEY

FAIL › dossier

PT30X-SDI/NDI Cameras

PRODUCT

· dossier confidence 50%

PT30X-SDI/NDI Cameras from PTZOptics have experienced notable security vulnerabilities, including remote code execution flaws that were not adequately addressed.

Failure events
2
Zero-days
0
RCEs
2
On KEV
2
Critical
0
Worst shame
85
PROFILE
Categoryvideo surveillanceWhat they doPT30X-SDI/NDI Cameras are PTZOptics' network-enabled digital video cameras designed for security and surveillance applications.
SECURITY POSTURE

The company has faced high-severity remote code execution vulnerabilities, indicating a potential lack of robust security controls.

Notable failures
  • CVE-2024-8956: PTZOptics PT30X-SDI/NDI cameras allow remote authentication bypass via IDOR, enabling root RCE when combined with CVE-2024-8957.
  • CVE-2024-8957: PTZOptics PT30X-SDI/NDI cameras allow authenticated attackers to escalate to root via OS command injection in the ntp_addr parameter.
Patterns: Repeated unpatched high-severity vulnerabilities.
FAILURE HISTORY · 2
DATEEVENTSEVSUMMARY
2024-11-04 CVE-2024-8956 high PTZOptics PT30X-SDI/NDI cameras allow remote authentication bypass via IDOR, enabling root RCE when combined with CVE-2024-8957.
2024-11-04 CVE-2024-8957 high PTZOptics PT30X-SDI/NDI cameras allow authenticated attackers to escalate to root via OS command injection in the ntp_addr parameter.
Open questions: How has PTZOptics addressed the identified security vulnerabilities? · What are the current security practices in place for PTZOptics' products?
DOSSIER · dex-RAG synthesis · grounded in our own collection + trusted sourcesbuilt 2026-08-07 03:42:58.973403+00:00