CVE-2024-8956

PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an insufficient authentication issue. The camera does not properly enforce authentication to /cgi-bin/param.cgi when requests are sent without an HTTP Authorization header. The result is a remote and unauthenticated attacker can leak sensitive data such as usernames, password hashes, and configurations details. Additionally, the attacker can update individual configuration values or overwrite the whole file.

CVSS v3 9.1 CRITICAL

9.1^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://ptzoptics.com/firmware-changelog/	Release Notes
https://vulncheck.com/advisories/ptzoptics-insufficient-auth	Third Party Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:ptzoptics:pt30x-sdi_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:ptzoptics:pt30x-sdi:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND

cpe:2.3:o:ptzoptics:pt30x-ndi-xx-g2_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:ptzoptics:pt30x-ndi-xx-g2:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2024-09-17 20:15

Updated : 2024-11-05 02:00

NVD link : CVE-2024-8956

Mitre link : CVE-2024-8956

CVE.ORG link : CVE-2024-8956

JSON object : View

Products Affected

ptzoptics

pt30x-sdi_firmware
pt30x-sdi
pt30x-ndi-xx-g2
pt30x-ndi-xx-g2_firmware

CWE

CWE-287

Improper Authentication

{"id": "CVE-2024-8956", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.1, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 3.9}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.1, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 3.9}]}, "published": "2024-09-17T20:15:07.287", "references": [{"url": "https://ptzoptics.com/firmware-changelog/", "tags": ["Release Notes"], "source": "disclosure@vulncheck.com"}, {"url": "https://vulncheck.com/advisories/ptzoptics-insufficient-auth", "tags": ["Third Party Advisory"], "source": "disclosure@vulncheck.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "description": [{"lang": "en", "value": "CWE-287"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-287"}]}], "descriptions": [{"lang": "en", "value": "PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an insufficient authentication issue. The camera does not properly enforce authentication to /cgi-bin/param.cgi when requests are sent without an HTTP Authorization header. The result is a remote and unauthenticated attacker can leak sensitive data such as usernames, password hashes, and configurations details. Additionally, the attacker can update individual configuration values or overwrite the whole file."}, {"lang": "es", "value": "Las c\u00e1maras PTZOptics PT30X-SDI/NDI-xx anteriores al firmware 6.3.40 son vulnerables a un problema de autenticaci\u00f3n insuficiente. La c\u00e1mara no aplica correctamente la autenticaci\u00f3n en /cgi-bin/param.cgi cuando se env\u00edan solicitudes sin un encabezado de autorizaci\u00f3n HTTP. El resultado es que un atacante remoto y no autenticado puede filtrar datos confidenciales, como nombres de usuario, hashes de contrase\u00f1as y detalles de configuraci\u00f3n. Adem\u00e1s, el atacante puede actualizar valores de configuraci\u00f3n individuales o sobrescribir todo el archivo."}], "lastModified": "2024-11-05T02:00:01.697", "cisaActionDue": "2024-11-25", "cisaExploitAdd": "2024-11-04", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:ptzoptics:pt30x-sdi_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "604C6EEF-4273-4366-AFF2-86C3183F545D", "versionEndExcluding": "6.3.40"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:ptzoptics:pt30x-sdi:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "7462D89D-2105-417F-AB0E-D23C288156C8"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:ptzoptics:pt30x-ndi-xx-g2_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B410E242-DFEE-449D-9687-6F4D0BEB8F63", "versionEndExcluding": "6.3.40"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:ptzoptics:pt30x-ndi-xx-g2:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "C8F75E95-D59D-45D4-B798-D0493642F53E"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "disclosure@vulncheck.com", "cisaRequiredAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "cisaVulnerabilityName": "PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability"}