CVE-2024-8957
PT
PTZOptics PT30X-SDI/NDI Cameras
PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability
What it is
PTZOptics PT30X-SDI/NDI cameras contain an OS command injection vulnerability that allows a remote, authenticated attacker to escalate privileges to root via a crafted payload with the ntp_addr parameter of the /cgi-bin/param.cgi CGI script.
What to do
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.