← Back to browse · API

CVE-2024-8956

Severity
CRITICAL
CVSS
9.1
EPSS
0.61279
Risk score
82.85
CISA KEV
Yes
PoC
No
Published
2024-11-04
Modified
2024-11-04
First seen
2026-08-07
Aliases
EUVD-2024-49505, GHSA-58RW-8PF6-2MGQ
Products
PTZOptics:PT30X-NDI 0 <6.3.40, PTZOptics:PT30X-SDI 0 <6.3.40, PTZOptics:PT30X-SDI/NDI Cameras
Sources
euvd EUVD-2024-49505
cisa.gov CVE-2024-8956

Description

PTZOptics PT30X-SDI/NDI cameras contain an insecure direct object reference (IDOR) vulnerability that allows a remote, attacker to bypass authentication for the /cgi-bin/param.cgi CGI script. If combined with CVE-2024-8957, this can lead to remote code execution as root.

References