CVE-2026-75969
Estado: AplazadaCrítica (9.1)—
Missing authentication for critical function vulnerability for all PTZOptics cameras and the Firmware Upgrade Tool - Firmware Update modules. A missing authentication vulnerability in the firmware update mechanism of affected PTZOptics cameras allows an unauthenticated user to install modified firmware on the device without administrator credentials.
This vulnerability allows attackers to upload modified firmware to the device without admin credentials. This issue affects:
Detalles técnicos trazas, registros y código del informe original
* Move 4K 12X before: 0.0.98 * Move 4K 20X before: 0.1.33 * Move 4K 30X before: 2.1.17 * Link 4K 12X before: 0.0.99 * Link 4K 20X before: 0.1.37 * Link 4K 30X before: 2.1.18 * Move SE 12X before: 9.1.66 * Move SE 20X before: 9.1.44 * Move SE 30X before: 9.1.46 * Studio 4K 12X before: 8.3.32 * Studio 4K 20X before: 8.3.32 * Studio SE 12X before: 8.3.32 * Studio SE 20X before: 8.3.32 * All Generation 2 cameras, including: PT12X-SDI-GY-G2, PT12X-SDI-WH-G2, PT12X-NDI-GY-G2, PT12X-NDI-WH-G2; PT12X-USB-GY-G2, PT12X-USB-WH-G2; PT20X-SDI-GY-G2, PT20X-SDI-WH-G2, PT20X-NDI-GY-G2, PT20X-NDI-WH-G2; PT20X-USB-GY-G2, PT20X-USB-WH-G2; PT30X-SDI-GY-G2, PT30X-SDI-WH-G2, PT30X-NDI-GY-G2, PT30X-NDI-WH-G2; PTVL-ZCAM, PTVL-NDI-ZCAM; PTEPTZ-ZCAM-G2, PTEPTZ-NDI-ZCAM-G2; PT12X-ZCAM, PT12X-NDI-ZCAM; PT20X-ZCAM, PT20X-NDI-ZCAM; Studio Pro - All versions * Upgrade Tool - All versions
CVSS
- Versión: 4.0
- Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:U/V:C/RE:L/U:Red
- Puntuación base: 9.1
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.56%
- Percentil entre todas las CVEs puntuadas: 45
- Fecha de la puntuación: 1/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (39)
⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.
Ptzoptics — Link 4K 12XAIPtzoptics — Link 4K 20XAIPtzoptics — Link 4K 30XAIPtzoptics — Move 4K 12XAIPtzoptics — Move 4K 20XAIPtzoptics — Move 4K 30XAIPtzoptics — Move SE 12XAIPtzoptics — Move SE 20XAIPtzoptics — Move SE 30XAIPtzoptics — Pt12x NDI GY G2AIPtzoptics — Pt12x NDI WH G2AIPtzoptics — Pt12x NDI ZcamAIPtzoptics — Pt12x SDI GY G2AIPtzoptics — Pt12x SDI WH G2AIPtzoptics — Pt12x USB GY G2AIPtzoptics — Pt12x USB WH G2AIPtzoptics — Pt12x ZcamAIPtzoptics — Pt20x NDI GY G2AIPtzoptics — Pt20x NDI WH G2AIPtzoptics — Pt20x NDI ZcamAIPtzoptics — Pt20x SDI GY G2AIPtzoptics — Pt20x SDI WH G2AIPtzoptics — Pt20x USB GY G2AIPtzoptics — Pt20x USB WH G2AIPtzoptics — Pt20x ZcamAIPtzoptics — Pt30x NDI GY G2AIPtzoptics — Pt30x NDI WH G2AIPtzoptics — Pt30x SDI GY G2AIPtzoptics — Pt30x SDI WH G2AIPtzoptics — Pteptz NDI Zcam G2AIPtzoptics — Pteptz Zcam G2AIPtzoptics — Ptvl NDI ZcamAIPtzoptics — Ptvl ZcamAIPtzoptics — Studio 4K 12XAIPtzoptics — Studio 4K 20XAIPtzoptics — Studio PROAIPtzoptics — Studio SE 12XAIPtzoptics — Studio SE 20XAIPtzoptics — Upgrade ToolAI
CWE
- CWE-306
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2026-75969",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2026-75969",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "yes"
},
{
"technicalImpact": "total"
}
],
"version": "2.0.3",
"timestamp": "2026-09-30T18:30:11.739848Z"
}
}
],
"cvssMetricV40": [
{
"type": "Secondary",
"source": "16cac6a8-cc1e-4741-89aa-6b97e2437706",
"cvssData": {
"Safety": "NOT_DEFINED",
"version": "4.0",
"Recovery": "USER",
"baseScore": 9.1,
"Automatable": "NOT_DEFINED",
"attackVector": "NETWORK",
"baseSeverity": "CRITICAL",
"valueDensity": "CONCENTRATED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:U/V:C/RE:L/U:Red",
"exploitMaturity": "UNREPORTED",
"providerUrgency": "RED",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"subIntegrityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"integrityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"subAvailabilityImpact": "HIGH",
"vulnAvailabilityImpact": "HIGH",
"availabilityRequirement": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"subConfidentialityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"confidentialityRequirement": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"vulnerabilityResponseEffort": "LOW",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED"
}
}
]
},
"affected": [
{
"source": "16cac6a8-cc1e-4741-89aa-6b97e2437706",
"affectedData": [
{
"vendor": "PTZOptics",
"modules": [
"Firmware Update"
],
"product": "Move 4K 12X",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "0.0.98",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "PTZOptics",
"modules": [
"Firmware Update"
],
"product": "Move 4K 20X",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "0.1.33",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "PTZOptics",
"modules": [
"Firmware Update"
],
"product": "Move 4K 30X",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "2.1.17",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "PTZOptics",
"modules": [
"Firmware Update"
],
"product": "Link 4K 12X",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "0.0.99",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "PTZOptics",
"modules": [
"Firmware Update"
],
"product": "Link 4K 20X",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "0.1.37",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "PTZOptics",
"modules": [
"Firmware Update"
],
"product": "Link 4K 30X",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "2.1.18",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "PTZOptics",
"modules": [
"Firmware Update"
],
"product": "Move SE 12X",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "9.1.66",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "PTZOptics",
"modules": [
"Firmware Update"
],
"product": "Move SE 20X",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "9.1.44",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "PTZOptics",
"modules": [
"Firmware Update"
],
"product": "Move SE 30X",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "9.1.46",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "PTZOptics",
"modules": [
"Firmware Update"
],
"product": "Studio 4K 12X",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "8.3.32",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "PTZOptics",
"modules": [
"Firmware Update"
],
"product": "Studio 4K 20X",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "8.3.32",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "PTZOptics",
"modules": [
"Firmware Update"
],
"product": "Studio SE 12X",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "8.3.32",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "PTZOptics",
"modules": [
"Firmware Update"
],
"product": "Studio SE 20X",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "8.3.32",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "PTZOptics",
"modules": [
"Firmware Update"
],
"product": "PT12X-SDI-GY-G2, PT12X-SDI-WH-G2, PT12X-NDI-GY-G2, PT12X-NDI-WH-G2",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom"
}
],
"defaultStatus": "affected"
},
{
"vendor": "PTZOptics",
"modules": [
"Firmware Update"
],
"product": "PT12X-USB-GY-G2, PT12X-USB-WH-G2",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom"
}
],
"defaultStatus": "affected"
},
{
"vendor": "PTZOptics",
"modules": [
"Firmware Update"
],
"product": "PT20X-SDI-GY-G2, PT20X-SDI-WH-G2, PT20X-NDI-GY-G2, PT20X-NDI-WH-G2",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom"
}
],
"defaultStatus": "affected"
},
{
"vendor": "PTZOptics",
"modules": [
"Firmware Update"
],
"product": "PT20X-USB-GY-G2, PT20X-USB-WH-G2",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom"
}
],
"defaultStatus": "affected"
},
{
"vendor": "PTZOptics",
"modules": [
"Firmware Update"
],
"product": "PT30X-SDI-GY-G2, PT30X-SDI-WH-G2, PT30X-NDI-GY-G2, PT30X-NDI-WH-G2",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom"
}
],
"defaultStatus": "affected"
},
{
"vendor": "PTZOptics",
"modules": [
"Firmware Update"
],
"product": "PTVL-ZCAM, PTVL-NDI-ZCAM",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom"
}
],
"defaultStatus": "affected"
},
{
"vendor": "PTZOptics",
"modules": [
"Firmware Update"
],
"product": "PTEPTZ-ZCAM-G2, PTEPTZ-NDI-ZCAM-G2",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom"
}
],
"defaultStatus": "affected"
},
{
"vendor": "PTZOptics",
"modules": [
"Firmware Update"
],
"product": "PT12X-ZCAM, PT12X-NDI-ZCAM",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom"
}
],
"defaultStatus": "affected"
},
{
"vendor": "PTZOptics",
"modules": [
"Firmware Update"
],
"product": "PT20X-ZCAM, PT20X-NDI-ZCAM",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom"
}
],
"defaultStatus": "affected"
},
{
"vendor": "PTZOptics",
"product": "Studio Pro",
"versions": [
{
"status": "affected",
"version": "0"
}
],
"defaultStatus": "affected"
},
{
"vendor": "PTZOptics",
"modules": [
"Firmware Update"
],
"product": "Upgrade Tool",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom"
}
],
"defaultStatus": "affected"
}
]
}
],
"published": "2026-09-30T17:16:49.583",
"references": [
{
"url": "https://psirt.havsys.com/",
"source": "16cac6a8-cc1e-4741-89aa-6b97e2437706"
}
],
"vulnStatus": "Deferred",
"weaknesses": [
{
"type": "Secondary",
"source": "16cac6a8-cc1e-4741-89aa-6b97e2437706",
"description": [
{
"lang": "en",
"value": "CWE-306"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Missing authentication for critical function vulnerability for all PTZOptics cameras and the Firmware Upgrade Tool - Firmware Update modules. A missing authentication vulnerability in the firmware update mechanism of affected PTZOptics cameras allows an unauthenticated user to install modified firmware on the device without administrator credentials.\n\n\n\nThis vulnerability allows attackers to upload modified firmware to the device without admin credentials. This issue affects:\n\n\n\n\n\n * Move 4K 12X before: 0.0.98\n * Move 4K 20X before: 0.1.33\n * Move 4K 30X before: 2.1.17\n * Link 4K 12X before: 0.0.99\n * Link 4K 20X before: 0.1.37\n * Link 4K 30X before: 2.1.18\n * Move SE 12X before: 9.1.66\n * Move SE 20X before: 9.1.44\n * Move SE 30X before: 9.1.46\n * Studio 4K 12X before: 8.3.32\n * Studio 4K 20X before: 8.3.32\n * Studio SE 12X before: 8.3.32\n * Studio SE 20X before: 8.3.32\n * All Generation 2 cameras, including: PT12X-SDI-GY-G2, PT12X-SDI-WH-G2, PT12X-NDI-GY-G2, PT12X-NDI-WH-G2; PT12X-USB-GY-G2, PT12X-USB-WH-G2; PT20X-SDI-GY-G2, PT20X-SDI-WH-G2, PT20X-NDI-GY-G2, PT20X-NDI-WH-G2; PT20X-USB-GY-G2, PT20X-USB-WH-G2; PT30X-SDI-GY-G2, PT30X-SDI-WH-G2, PT30X-NDI-GY-G2, PT30X-NDI-WH-G2; PTVL-ZCAM, PTVL-NDI-ZCAM; PTEPTZ-ZCAM-G2, PTEPTZ-NDI-ZCAM-G2; PT12X-ZCAM, PT12X-NDI-ZCAM; PT20X-ZCAM, PT20X-NDI-ZCAM; Studio Pro - All versions\n * Upgrade Tool - All versions"
}
],
"lastModified": "2026-09-30T21:17:13.377",
"sourceIdentifier": "16cac6a8-cc1e-4741-89aa-6b97e2437706"
}