CVE-2025-35451

Katalog CVE

CVSS 9.8 · Critical EPSS 0,77%

Kerentanan Use of Hard-coded Credentials pada ptzoptics pt12x-sdi-xx-g2 firmware, ptzoptics pt12x-ndi-xx firmware +49 lainnya. Skor CVSS 3.1 9.8 (Critical) menurut CNA.

Deskripsi (NVD)

PTZOptics and possibly other ValueHD-based pan-tilt-zoom cameras use hard-coded, default administrative credentials. The passwords can readily be cracked. Many cameras have SSH or telnet listening on all interfaces. The passwords cannot be changed by the user, nor can the SSH or telnet service be disabled by the user.

Rincian

Terbit di NVD

5 September 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

9.8 (Critical), sumber CNA
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-798: Use of Hard-coded Credentials

EPSS (30 hari)

0,77% peluang dieksploitasi; lebih tinggi dari 54,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-10 advisory pihak ketiga · pemerintah AS
• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-162-10.json advisory pihak ketiga
• https://www.cve.org/CVERecord?id=CVE-2025-35451 advisory pihak ketiga
• https://www.greynoise.io/blog/greynoise-intelligence-discovers-zero-day-vulnerabilities-in-live-streaming-came... advisory pihak ketiga
• https://www.labs.greynoise.io/grimoire/2024-10-31-sift-0-day-rce/ exploit · advisory pihak ketiga