Approved changes feed: RSS · Atom

cpe:2.3:o:ptzoptics:pt30x-ndi_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorPtzoptics (fb35c24a-3271-542b-a744-a655504b7e6f)
ProductPt30X Ndi Firmware (e5a54af0-2525-5830-841b-b12e06fcee09)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-8957 vulnerable 2026-06-08 07:00:26.221832 PTZOptics NDI and SDI Cameras Command Injection via NTP Address Configuration
HIGH (7.2)
PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an OS command injection issue. The camera does not sufficiently validate the ntp_addr configuration value which may lead to arbitrary command execution when ntp_client is started. When chained with CVE-2024-8956, a remote and unauthenticated attacker can execute arbitrary OS commands on affected devices.
Published: 2024-09-17T20:08:25.588Z
Updated: 2025-12-27T16:47:39.385Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.