CVE-2025-35452
Critical
Description
PTZOptics and possibly other ValueHD-based pan-tilt-zoom cameras use default, shared credentials for the administrative web interface.
SeverityCritical
CVSS9.8
Exploit probability—
ProductPtzoptics Pt12x-sdi-xx-g2 Firmware
PublishedSep 5, 2025
First seenSep 5, 2025
Weakness typeCWE-798Hard-coded credentialsCWE-1392CWE-1392
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ptzoptics pt12x-sdi-xx-g2_firmware | No range specified | — |
| ptzoptics pt12x-ndi-xx_firmware | No range specified | — |
| ptzoptics pt12x-usb-xx-g2_firmware | No range specified | — |
| ptzoptics pt20x-sdi-xx-g2_firmware | No range specified | — |
| ptzoptics t20x-ndi-xx_firmware | No range specified | — |
| ptzoptics pt20x-usb-xx-g2_firmware | No range specified | — |
| ptzoptics pt30x-sdi-xx-g2_firmware | No range specified | — |
| ptzoptics pt30x-ndi-xx_firmware | No range specified | — |
| ptzoptics pt12x-zcam_firmware | No range specified | — |
| ptzoptics pt20x-zcam_firmware | No range specified | — |
| ptzoptics ptvl-zcam_firmware | No range specified | — |
| ptzoptics pteptz-zcam-g2_firmware | No range specified | — |
| ptzoptics pteptz-ndi-zcam-g2 | No range specified | — |
| ptzoptics pt12x-4k-xx-g3_firmware | v ≤ 0.0.58 | — |
| ptzoptics pt20x-4k-xx-g3_firmware | v ≤ 0.0.85 | — |
| ptzoptics pt30x-4k-xx-g3_firmware | v ≤ 2.0.64 | — |
| ptzoptics pt12x-link-4k-xx_firmware | v ≤ 0.0.63 | — |
| ptzoptics pt20x-link-4k-xx_firmware | v ≤ 0.0.89 | — |
| ptzoptics pt30x-link-4k-xx_firmware | v ≤ 2.0.71 | — |
| ptzoptics pt12x-se-xx-g3_firmware | v ≤ 9.1.43 | — |
| ptzoptics pt20x-se-xx-g3_firmware | v ≤ 9.1.32 | — |
| ptzoptics pt30x-se-xx-g3_firmware | v ≤ 9.1.33 | — |
| ptzoptics pt-studiopro_firmware | v ≤ 9.0.41 | — |
| ptzoptics vl_fixed_camera_firmware | v ≤ 7.2.94 | — |
| ptzoptics ndi_fixed_camera_firmware | v ≤ 7.2.94 | — |
| multicam-systems mcamii_ptz_firmware | No range specified | — |
| smtav ba30s_firmware | No range specified | — |
| smtav ba20s_firmware | No range specified | — |
| smtav bv20s_firmware | No range specified | — |
| smtav bx30s_firmware | No range specified | — |
| smtav bx20n_firmware | No range specified | — |
| smtav bx20uhd-n_firmware | No range specified | — |
| smtav bx20uhd_firmware | No range specified | — |
| smtav ba30-n_firmware | No range specified | — |
| smtav ba20-n_firmware | No range specified | — |
| smtav ba12-n_firmware | No range specified | — |
| smtav hd17h-n_firmware | No range specified | — |
| smtav bx20s-sh_firmware | No range specified | — |
| smtav hd17h_firmware | No range specified | — |
| smtav bv30s_firmware | No range specified | — |
| smtav ba12s_firmware | No range specified | — |
| valuehd vx90_firmware | No range specified | — |
| valuehd vx720l_firmware | No range specified | — |
| valuehd vx752ag_firmware | No range specified | — |
| valuehd vx752a_firmware | No range specified | — |
| valuehd vx751ba_firmware | No range specified | — |
| valuehd vx630al_firmware | No range specified | — |
| valuehd vx61asl_firmware | No range specified | — |
| valuehd vx61basl_firmware | No range specified | — |
| valuehd vx60asl_firmware | No range specified | — |
| valuehd vx61al_firmware | No range specified | — |
| valuehd vx60al_firmware | No range specified | — |
| valuehd vx701ra_firmware | No range specified | — |
| valuehd vx701ta_firmware | No range specified | — |
| valuehd vx800i2_firmware | No range specified | — |
| valuehd v61w_firmware | No range specified | — |
| valuehd v63xl_firmware | No range specified | — |
| valuehd v60xl_firmware | No range specified | — |
| valuehd vx70uvs_firmware | No range specified | — |
| valuehd vx71uvs_firmware | No range specified | — |
| valuehd v71uvs_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.