Vulnerability Description
PTZOptics and possibly other ValueHD-based pan-tilt-zoom cameras use hard-coded, default administrative credentials. The passwords can readily be cracked. Many cameras have SSH or telnet listening on all interfaces. The passwords cannot be changed by the user, nor can the SSH or telnet service be disabled by the user.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ptzoptics | Pt12X-Sdi-Xx-G2 Firmware | <= 6.3.34 |
| Ptzoptics | Pt12X-Sdi-Xx-G2 | - |
| Ptzoptics | Pt12X-Ndi-Xx Firmware | <= 6.3.34 |
| Ptzoptics | Pt12X-Ndi-Xx | - |
| Ptzoptics | Pt12X-Usb-Xx-G2 Firmware | <= 6.2.81 |
| Ptzoptics | Pt12X-Usb-Xx-G2 | - |
| Ptzoptics | Pt20X-Sdi-Xx-G2 Firmware | <= 6.3.20 |
| Ptzoptics | Pt20X-Sdi-Xx-G2 | - |
| Ptzoptics | Pt20X-Ndi-Xx Firmware | <= 6.3.20 |
| Ptzoptics | Pt20X-Ndi-Xx | - |
| Ptzoptics | Pt20X-Usb-Xx-G2 Firmware | <= 6.2.73 |
| Ptzoptics | Pt20X-Usb-Xx-G2 | - |
| Ptzoptics | Pt30X-Sdi-Xx-G2 Firmware | <= 6.3.30 |
| Ptzoptics | Pt30X-Sdi-Xx-G2 | - |
| Ptzoptics | Pt30X-Ndi-Xx Firmware | <= 6.3.30 |
| Ptzoptics | Pt30X-Ndi-Xx | - |
| Ptzoptics | Pt12X-Zcam Firmware | <= 7.2.76 |
| Ptzoptics | Pt12X-Zcam | - |
| Ptzoptics | Pt20X-Zcam Firmware | <= 7.2.82 |
| Ptzoptics | Pt20X-Zcam | - |
Related Weaknesses (CWE)
References
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-16Third Party Advisory
- https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-10Third Party AdvisoryUS Government Resource
- https://www.cve.org/CVERecord?id=CVE-2025-35451Third Party Advisory
- https://www.greynoise.io/blog/greynoise-intelligence-discovers-zero-day-vulnerabThird Party Advisory
- https://www.labs.greynoise.io/grimoire/2024-10-31-sift-0-day-rce/ExploitThird Party Advisory
FAQ
What is CVE-2025-35451?
CVE-2025-35451 is a vulnerability with a CVSS score of 9.8 (CRITICAL). PTZOptics and possibly other ValueHD-based pan-tilt-zoom cameras use hard-coded, default administrative credentials. The passwords can readily be cracked. Many cameras have SSH or telnet listening on ...
How severe is CVE-2025-35451?
CVE-2025-35451 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2025-35451?
Check the references section above for vendor advisories and patch information. Affected products include: Ptzoptics Pt12X-Sdi-Xx-G2 Firmware, Ptzoptics Pt12X-Sdi-Xx-G2, Ptzoptics Pt12X-Ndi-Xx Firmware, Ptzoptics Pt12X-Ndi-Xx, Ptzoptics Pt12X-Usb-Xx-G2 Firmware.