← Back to browse · API

CVE-2024-8957

Severity
HIGH
CVSS
7.2
EPSS
0.8204
Risk score
82.51
CISA KEV
Yes
PoC
No
Published
2024-11-04
Modified
2024-11-04
First seen
2026-08-07
Aliases
EUVD-2024-49506, GHSA-9CX9-7V8G-H36V
Products
PTZOptics:PT30X-NDI 0 <6.3.40, PTZOptics:PT30X-SDI 0 <6.3.40, PTZOptics:PT30X-SDI/NDI Cameras
Sources
euvd EUVD-2024-49506
cisa.gov CVE-2024-8957

Description

PTZOptics PT30X-SDI/NDI cameras contain an OS command injection vulnerability that allows a remote, authenticated attacker to escalate privileges to root via a crafted payload with the ntp_addr parameter of the /cgi-bin/param.cgi CGI script.

References