← Database

CVE-2025-35451

CRITICAL CVSS: 9.8 Published: 2025-09-05 Modified: 2026-06-17

Description

PTZOptics and possibly other ValueHD-based pan-tilt-zoom cameras use hard-coded, default administrative credentials. The passwords can readily be cracked. Many cameras have SSH or telnet listening on all interfaces. The passwords cannot be changed by the user, nor can the SSH or telnet service be disabled by the user.

Affected Platforms

Valuehd Vx720L FirmwarePtzoptics Pt20X-Zcam FirmwarePtzoptics Ndi Fixed CameraPtzoptics Vl Fixed CameraPtzoptics Pt12X-Ndi-Xx FirmwarePtzoptics Pt12X-Sdi-Xx-G2 FirmwareValuehd V60Xl FirmwareSmtav Ba30S FirmwarePtzoptics Pt30X-Ndi-XxValuehd Vx701Ta Firmware

Weakness Type

CWE-798

References