Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2026-75969

PTZOptics Missing Authentication in Firmware Upload

Published
Last modified
Status
published
Known exploitation
Not listed in CISA KEV
Fix
Fixed in 0.0.98, 0.1.33, 2.1.17, 0.0.99, 0.1.37, and 5 more
Public exploit
None on Exploit-DB
CISA SSVC
  • Exploitation: none
  • Automatable: yes
  • Technical impact: total
?

Decision points from CISA's Vulnrichment, assessed (SSVC 2.0.3).

SSVC documentation

Summary

Missing authentication for critical function vulnerability for all PTZOptics cameras and the Firmware Upgrade Tool - Firmware Update modules. A missing authentication vulnerability in the firmware update mechanism of affected PTZOptics cameras allows an unauthenticated user to install modified firmware on the device without administrator credentials. This vulnerability allows attackers to upload modified firmware to the device without admin credentials. This issue affects: * Move 4K 12X before: 0.0.98 * Move 4K 20X before: 0.1.33 * Move 4K 30X before: 2.1.17 * Link 4K 12X before: 0.0.99 * Link 4K 20X before: 0.1.37 * Link 4K 30X before: 2.1.18 * Move SE 12X before: 9.1.66 * Move SE 20X before: 9.1.44 * Move SE 30X before: 9.1.46 * Studio 4K 12X before: 8.3.32 * Studio 4K 20X before: 8.3.32 * Studio SE 12X before: 8.3.32 * Studio SE 20X before: 8.3.32 * All Generation 2 cameras, including: PT12X-SDI-GY-G2, PT12X-SDI-WH-G2, PT12X-NDI-GY-G2, PT12X-NDI-WH-G2; PT12X-USB-GY-G2, PT12X-USB-WH-G2; PT20X-SDI-GY-G2, PT20X-SDI-WH-G2, PT20X-NDI-GY-G2, PT20X-NDI-WH-G2; PT20X-USB-GY-G2, PT20X-USB-WH-G2; PT30X-SDI-GY-G2, PT30X-SDI-WH-G2, PT30X-NDI-GY-G2, PT30X-NDI-WH-G2; PTVL-ZCAM, PTVL-NDI-ZCAM; PTEPTZ-ZCAM-G2, PTEPTZ-NDI-ZCAM-G2; PT12X-ZCAM, PT12X-NDI-ZCAM; PT20X-ZCAM, PT20X-NDI-ZCAM; Studio Pro - All versions * Upgrade Tool - All versions

Affected versions

  • PTZOptics Move 4K 12X

    fixed in 0.0.98

  • PTZOptics Move 4K 20X

    fixed in 0.1.33

  • PTZOptics Move 4K 30X

    fixed in 2.1.17

  • PTZOptics Link 4K 12X

    fixed in 0.0.99

  • PTZOptics Link 4K 20X

    fixed in 0.1.37

  • PTZOptics Link 4K 30X

    fixed in 2.1.18

  • PTZOptics Move SE 12X

    fixed in 9.1.66

  • PTZOptics Move SE 20X

    fixed in 9.1.44

  • PTZOptics Move SE 30X

    fixed in 9.1.46

  • PTZOptics Studio 4K 12X

    fixed in 8.3.32

  • PTZOptics Studio 4K 20X

    fixed in 8.3.32

  • PTZOptics Studio SE 12X

    fixed in 8.3.32

  • PTZOptics Studio SE 20X

    fixed in 8.3.32

  • PTZOptics PT12X-SDI-GY-G2, PT12X-SDI-WH-G2, PT12X-NDI-GY-G2, PT12X-NDI-WH-G2

    0

  • PTZOptics PT12X-USB-GY-G2, PT12X-USB-WH-G2

    0

  • PTZOptics PT20X-SDI-GY-G2, PT20X-SDI-WH-G2, PT20X-NDI-GY-G2, PT20X-NDI-WH-G2

    0

  • PTZOptics PT20X-USB-GY-G2, PT20X-USB-WH-G2

    0

  • PTZOptics PT30X-SDI-GY-G2, PT30X-SDI-WH-G2, PT30X-NDI-GY-G2, PT30X-NDI-WH-G2

    0

  • PTZOptics PTVL-ZCAM, PTVL-NDI-ZCAM

    0

  • PTZOptics PTEPTZ-ZCAM-G2, PTEPTZ-NDI-ZCAM-G2

    0

  • PTZOptics PT12X-ZCAM, PT12X-NDI-ZCAM

    0

  • PTZOptics PT20X-ZCAM, PT20X-NDI-ZCAM

    0

  • PTZOptics Studio Pro

    0

  • PTZOptics Upgrade Tool

    0

References 1

psirt.havsys.com