PTZOptics PT30X-SDI/PT30X-NDI up to 6.3.39 Authorization Header /cgi-bin/param.cgi improper authentication

Summaryinfo

A vulnerability identified as critical has been detected in PTZOptics PT30X-SDI and PT30X-NDI up to 6.3.39. This vulnerability affects unknown code of the file /cgi-bin/param.cgi of the component Authorization Header Handler. Performing a manipulation results in improper authentication. This vulnerability is reported as CVE-2024-8956. The attack is possible to be carried out remotely. Moreover, an exploit is present. You should upgrade the affected component.

Detailsinfo

A vulnerability, which was classified as critical, was found in PTZOptics PT30X-SDI and PT30X-NDI up to 6.3.39. This affects some unknown functionality of the file /cgi-bin/param.cgi of the component Authorization Header Handler. The manipulation with an unknown input leads to a improper authentication vulnerability. CWE is classifying the issue as CWE-287. When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct. This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an insufficient authentication issue. The camera does not properly enforce authentication to /cgi-bin/param.cgi when requests are sent without an HTTP Authorization header. The result is a remote and unauthenticated attacker can leak sensitive data such as usernames, password hashes, and configurations details. Additionally, the attacker can update individual configuration values or overwrite the whole file.

The weakness was disclosed by Konstantin Lazarev. The advisory is shared at ptzoptics.com. This vulnerability is uniquely identified as CVE-2024-8956 since 09/17/2024. The exploitability is told to be easy. It is possible to initiate the attack remotely. No form of authentication is needed for exploitation. Technical details and a exploit are known.

It is declared as attacked. The vulnerability scanner Nessus provides a plugin with the ID 210334 (PTZOptics Camera Multiple Vulnerabilities (Direct Check)), which helps to determine the existence of the flaw in a target environment. The CISA Known Exploited Vulnerabilities Catalog lists this issue since 11/04/2024 with a due date of 11/25/2024:

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Upgrading to version 6.3.40 eliminates this vulnerability. The upgrade is hosted for download at ptzoptics.com.

The vulnerability is also documented in the databases at Tenable (210334) and EUVD (EUVD-2024-49505). If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Vendor

• PTZOptics

Name

• PT30X-NDI
• PT30X-SDI

Version

• 6.3.0
• 6.3.1
• 6.3.2
• 6.3.3
• 6.3.4
• 6.3.5
• 6.3.6
• 6.3.7
• 6.3.8
• 6.3.9
• 6.3.10
• 6.3.11
• 6.3.12
• 6.3.13
• 6.3.14
• 6.3.15
• 6.3.16
• 6.3.17
• 6.3.18
• 6.3.19
• 6.3.20
• 6.3.21
• 6.3.22
• 6.3.23
• 6.3.24
• 6.3.25
• 6.3.26
• 6.3.27
• 6.3.28
• 6.3.29
• 6.3.30
• 6.3.31
• 6.3.32
• 6.3.33
• 6.3.34
• 6.3.35
• 6.3.36
• 6.3.37
• 6.3.38
• 6.3.39

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion