Known Vulnerabilities & Fixes
As part of our commitment to our customers’ privacy and the security of our products, PTZOptics will share quarterly updates on known vulnerabilities to our cameras and software, the measures we’ve taken to solve these issues, and how customers can implement necessary changes or updates. We strive to constantly improve the quality and security of our products and welcome user input on where these vulnerabilities might exist.
Q3 2026 Update
The PTZOptics team was alerted by Jaroslav Svoboda of CESNET to a vulnerability affecting the PTZOptics cameras. This has been documented in CVE-2026-75969.
Vulnerabilities Reported
- CVE-2026-75969 describes the identified vulnerability that allows an unauthenticated user to upload firmware to the device. This allows an attacker to alter critical aspects of the firmware and software internal to the camera.
Our Response
This vulnerability has been patched on the G3 products. Please see the tables below for a detailed report of the affected firmware and the remediations to fix the problem.
CVE-2026-75969
Product SKU
Affected Firmware
Remediations
Move 4K 12X
≤ 0.0.90
Update to Firmware 0.0.98
Move 4K 20X
≤ 0.1.25
Update to Firmware 0.1.33
Move 4K 30X
≤ 2.1.08
Update to Firmware 2.1.17
Link 4K 12X
≤ 0.0.89
Update to Firmware 0.0.99
Link 4K 20X
≤ 0.1.24
Update to Firmware 0.1.37
Link 4K 30X
≤ 2.1.07
Update to Firmware 2.1.18
Move SE 12X
≤ 9.1.56
Update to Firmware 9.1.66
Move SE 20X
≤ 9.1.38
Update to Firmware 9.1.44
Move SE 30X
≤ 9.1.42
Update to Firmware 9.1.46
Studio 4K 12X
≤ 8.2.31
Update to Firmware 8.3.32
Studio 4K 20X
≤ 8.2.31
Update to Firmware 8.3.32
Studio SE 12X
≤ 8.2.31
Update to Firmware 8.3.32
Studio SE 20X
≤ 8.2.31
Update to Firmware 8.3.32
Studio Pro
All firmware
No remediation available
PT12X-SDI-xx-G2,
PT12X-NDI-xx-G2
PT12X-NDI-xx-G2
All firmware
No remediation available
PT12X-USB-xx-G2
All firmware
No remediation available
PT20X-SDI-xx-G2,
PT20X-NDI-xx-G2
PT20X-NDI-xx-G2
All firmware
No remediation available
PT20X-USB-xx-G2
All firmware
No remediation available
PT30X-SDI-xx-G2,
PT30X-NDI-xx-G2
PT30X-NDI-xx-G2
All firmware
No remediation available
PTVL-ZCAM,
PTVL-NDI-ZCAM
PTVL-NDI-ZCAM
All firmware
No remediation available
PT12X-ZCAM,
PT12X-NDI-ZCAM
PT12X-NDI-ZCAM
All firmware
No remediation available
PT20X-ZCAM,
PT20X-NDI-ZCAM
PT20X-NDI-ZCAM
All firmware
No remediation available
PTEPTZ-ZCAM-G2,
PTEPTZ-NDI-ZCAM-G2
PTEPTZ-NDI-ZCAM-G2
All firmware
No remediation available
Upgrade Tool
All versions
No remediation available
Workaround
- Disable or disconnect network services.
- Restrict access to the camera to a trusted management VLAN.
Q2 2026 Update
Vulnerabilities Reported
The PTZOptics team received no new vulnerabilities during the second quarter of 2026.
Our Response
No actions were taken at this time; the PTZOptics team remains vigilant to address new vulnerabilities as they arise.
Q1 2026 Update
Vulnerabilities Reported
The PTZOptics team received no new vulnerabilities during the first quarter of 2026.
Our Response
No actions were taken at this time; the PTZOptics team remains vigilant to address new vulnerabilities as they arise.
Q4 2025 Update
Vulnerabilities Reported
The PTZOptics team received no new vulnerabilities during the fourth quarter of 2025.
Our Response
No actions were taken at this time; the PTZOptics team remains vigilant to address new vulnerabilities as they arise.
Q3 2025 Update
The PTZOptics team was alerted to two Common Vulnerabilities & Exposures (CVE-2025-8671 and CVE-2025-54500) that may affect the PTZOptics cameras. When paired together, the identified vulnerabilities allow for a Denial-of-Service attack (DoS) on a device using lighttpd web server.
Vulnerabilities Reported
- CVE-2025-8671 – A mismatch caused by client-triggered server-sent stream resets between HTTP/2 specifications and the internal architectures of some HTTP/2 implementations may result in excessive server resource consumption leading to denial-of-service (DoS). By opening streams and then rapidly triggering the server to reset them—using malformed frames or flow control errors—an attacker can exploit incorrect stream accounting. Streams reset by the server are considered closed at the protocol level, even though backend processing continues. This allows a client to cause the server to handle an unbounded number of concurrent streams on a single connection. This CVE will be updated as affected product details are released.
- CVE-2025-54500 – An HTTP/2 implementation flaw allows a denial-of-service (DoS) that uses malformed HTTP/2 control frames to break the maximum concurrent streams limit (HTTP/2 MadeYouReset Attack).
Our Response
Updated 09/22/2025
An earlier update to this page noted two Common Vulnerabilities and Exposures (CVEs) actively affecting the cameras: CVE-225-8617 and CVE-2025-25500. These two CVEs allowed for Denial-of-Service (DoS) attacks through vulnerabilities in the HTTP/2 module of the lighttpd web server. After a thorough investigation it was determined that no actively sold cameras are vulnerable to either CVE. We do not include the HTTP/2 module in the lighttpd server on these cameras.
An earlier update to this page noted two Common Vulnerabilities and Exposures (CVEs) actively affecting the cameras: CVE-225-8617 and CVE-2025-25500. These two CVEs allowed for Denial-of-Service (DoS) attacks through vulnerabilities in the HTTP/2 module of the lighttpd web server. After a thorough investigation it was determined that no actively sold cameras are vulnerable to either CVE. We do not include the HTTP/2 module in the lighttpd server on these cameras.
Q2 2025 Update
The PTZOptics team was alerted by CISA & Carnegie Mellon University (through their VINCE program) to two security vulnerabilities in previous firmware of PTZOptics cameras as noted in Common Vulnerabilities and Exposures report CVE-2025-35451 & CVE-2025-35452. The identified vulnerabilities allow unauthorized access to sensitive information and control over the cameras. The PTZOptics team tested these vulnerabilities against every PTZOptics device and patched all those affected.
Vulnerabilities Reported
- CVE-2025-35451 – PTZOptics devices have SSH or telnet enabled by default with default passwords that are trivial to crack. The passwords cannot be changed by the user, nor can the SSH or telnet service be disabled by the user.
- CVE-2025-35452 – PTZOptics devices use a default, shared password for the web interface.
Our Response
Both of these vulnerabilities have already been patched on the affected devices. To be specific, CVE-2025-35451 (SSH or Telnet enabled by default) only affects specific firmware versions on the G2 cameras. The G3 cameras have never had SSH or Telnet enabled. CVE-2025-35452 (shared default password) has been patched on the G3 cameras along with the Q1 2025 Update. All G2 cameras are affected by this vulnerability.
Please see the tables below for a detailed report of the affected firmware and the remediations to fix the problem.
Please see the tables below for a detailed report of the affected firmware and the remediations to fix the problem.
CVE-2025-35451
Product SKU
Affected Firmware
Fixed Firmware
Remediations
PT12X-SDI-xx-G2/PT12X-NDI-xx
< 6.3.34
6.3.34 (8/19/2021)
Update firmware
PT12X-USB-xx-G2
< 6.2.81
6.2.81 (9/13/2021)
Update firmware
PT20X-SDI-xx-G2/PT20X-NDI-xx
< 6.3.20
6.3.20 (5/6/2022)
Update firmware
PT20X-USB-xx-G2
< 6.2.73
6.2.73 (9/16/2021)
Update firmware
PT30X-SDI-xx-G2 / PT30X-NDI-xx
< 6.3.30
6.3.30 (4/21/2022)
Update firmware
PT12X-ZCAM*
< 7.2.76
7.2.76 (5/17/2021)
Update firmware
PT20X-ZCAM*
< 7.2.82
7.2.82 (5/17/2021)
Update firmware
PTVL-ZCAM*
< 7.2.79
7.2.79 (4/23/2023)
Update firmware
PTEPTZ-ZCAM-G2/PTEPTZ-NDI-ZCAM-G2*
< 8.1.81
8.1.81 (4/30/2021)
Update firmware
CVE-2025-35452
Product SKU
Affected Firmware
Fixed Firmware
Remediations
PT12X-SDI-xx-G2/PT12X-NDI-xx
All
N/A
Change the device’s password
PT12X-USB-xx-G2
All
N/A
Change the device’s password
PT20X-SDI-xx-G2/PT20X-NDI-xx
All
N/A
Change the device’s password
PT20X-USB-xx-G2
All
N/A
Change the device’s password
PT30X-SDI-xx-G2 / PT30X-NDI-xx
All
N/A
Change the device’s password
PT12X-ZCAM*
All
N/A
Change the device’s password
PT20X-ZCAM*
All
N/A
Change the device’s password
PTVL-ZCAM*
All
N/A
Change the device’s password
PTEPTZ-ZCAM-G2/PTEPTZ-NDI-ZCAM-G2*
All
N/A
Change the device’s password
PT12X-4K-xx-G3
< 0.0.58
0.0.58 (2/21/2025)
Update firmware
PT20X-4K-xx-G3
< 0.0.85
0.0.85 (2/27/2025)
Update firmware
PT30X-4K-xx-G3
< 2.0.64
2.0.64 (1/14/2025)
Update firmware
PT12X-LINK-4K-xx
< 0.0.63
0.0.63 (4/08/2025)
Update firmware
PT20X-LINK-4K-xx
< 0.0.89
0.0.89 (4/28/2025)
Update firmware
PT30X-LINK-4K-xx
< 2.0.71
2.0.71 (4/28/2025)
Update firmware
PT12X-SE-xx-G3
< 9.1.43
9.1.43 (2/13/2025)
Update firmware
PT20X-SE-xx-G3
< 9.1.32
9.1.32 (1/14/2025)
Update firmware
PT30X-SE-xx-G3
< 9.1.33
9.1.33 (2/13/2025)
Update firmware
PT-STUDIOPRO
< 9.0.41
9.0.41 (2/27/2025)
Update firmware
Q1 2025 Update
The PTZOptics team was alerted by VulnCheck, Inc. to three potential security vulnerabilities in the firmware of our G2 30x SDI/NDI camera as noted in Common Vulnerabilities and Exposures report CVE-2024-8956 and CVE-2024-8957. The identified vulnerabilities that, when used in combination with each other, could potentially allow unauthorized access to sensitive information and control over the cameras. The PTZOptics team tested this vulnerability against every PTZOptics device and we patched all those affected.
Vulnerabilities Reported
- Insufficient Authentication – Some API routes in our cameras were not protected by authentication, potentially exposing network and login information.
- Remote File Write – Certain API commands allowed direct modification of files on the camera, posing a risk of unauthorized changes to the camera’s operating files.
- Remote Code Execution – A flaw in the Network Time Protocol configuration API allowed unauthorized users to run applications on the camera, potentially compromising the entire file system.
Our Response
We have now enforced authentication across all API routes and web pages. To address the remote file write issue, users must provide administrative credentials to modify any configuration files on the camera. This ensures only authorized users can change the camera’s settings, safeguarding against unauthorized modifications to the underlying camera configuration files. Regarding the remote code execution issue, we have patched the relevant API and processes to prevent remote code execution. Since being alerted to these vulnerabilities, we have produced firmware updates that address these issues. To ensure the security of PTZOptics cameras, updating the firmware on G2 and G3 cameras is recommended. Detailed instructions for applying the updates are provided on our knowledge base and through our customer support channels.
Please refer to the table below to ensure the firmware for your specific product(s) is updated.
Please refer to the table below to ensure the firmware for your specific product(s) is updated.
Product SKU
Previous Firmware
CVE/PSTI Approved Firmware
PT12X-4K-xx-G3
0.0.46
0.0.58
PT20X-4K-xx-G3
0.0.73
0.0.85
PT30X-4K-xx-G3
2.0.48
2.0.64
PT12X-SE-xx-G3
9.1.35
9.1.43
PT20X-SE-xx-G3
9.1.26
9.1.32
PT30X-SE-xx-G3
9.1.24
9.1.33
PT12X-LINK-4K-xx
0.0.48
0.0.63
PT20X-LINK-4K-xx
0.0.75
0.0.89
PT30X-LINK-4K-xx
2.0.50
2.0.71
PT-STUDIOPRO
9.0.39
9.0.41
PT12X-STUDIO-4K-xx-G3
8.1.82
8.1.90
PT20X-STUDIO-4K-xx-G3
8.1.83
8.1.90
PT12X-SDI/NDI-xx
6.3.62
6.3.70
PT12X-USB-xx
6.2.81
6.2.88
PT20X-SDI/NDI-xx
6.3.22
6.3.27
PT20X-USB-xx
6.2.73
6.2.81
PT30X-SDI/NDI-xx
6.3.32
6.3.43
VL Fixed Camera/NDI Fixed Camera
7.2.83
7.2.94
12x Fixed Camera/NDI Fixed Camera
7.2.80
7.2.85
20x Fixed Camera/NDI Fixed Camera
7.2.89
7.2.94
EPTZ Fixed Camera/NDI Fixed Camera
8.1.83
8.1.89
HC-EPTZ-NDI
8.2.08
8.2.14
