PT-2025-36321 · Ptzoptics+1 · Ptzoptics+1

Published 2025-09-05 · Updated 2025-09-06 · CVE-2025-35452

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions PTZOptics and ValueHD-based pan-tilt-zoom cameras (affected versions not specified)

Description PTZOptics and ValueHD-based pan-tilt-zoom cameras utilize default, shared credentials for the administrative web interface. This allows unauthorized access to the camera’s settings and potentially its video feed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Using Hardcoded Credentials

Weakness Enumeration

CWE-1392

CWE-798

Related Identifiers

CVE-2025-35452

Affected Products

Ptzoptics

Valuehd

References · 10

• 🔥 https://labs.greynoise.io/grimoire/2024-10-31-sift-0-day-rce · Exploit
• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-162-10.json · Patch
• https://osv.dev/vulnerability/CVE-2025-35452 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-35452 · Security Note
• https://cve.org/CVERecord?id=CVE-2025-35452 · Security Note
• https://t.me/canyoupwnme/6911 · Telegram Post
• https://cisa.gov/news-events/ics-advisories/icsa-25-162-10 · Note
• https://twitter.com/ZeroPathLabs/status/1964064598245466290 · Twitter Post
• https://twitter.com/CVEnew/status/1964195426825097310 · Twitter Post
• https://greynoise.io/blog/greynoise-intelligence-discovers-zero-day-vulnerabilities-in-live-streaming-cameras-with-the-help-of-ai · Note