Description
Missing authentication for critical function vulnerability for all PTZOptics cameras and the Firmware Upgrade Tool - Firmware Update modules. A missing authentication vulnerability in the firmware update mechanism of affected PTZOptics cameras allows an unauthenticated user to install modified firmware on the device without administrator credentials.



This vulnerability allows attackers to upload modified firmware to the device without admin credentials. This issue affects:





* Move 4K 12X before: 0.0.98
* Move 4K 20X before: 0.1.33
* Move 4K 30X before: 2.1.17
* Link 4K 12X before: 0.0.99
* Link 4K 20X before: 0.1.37
* Link 4K 30X before: 2.1.18
* Move SE 12X before: 9.1.66
* Move SE 20X before: 9.1.44
* Move SE 30X before: 9.1.46
* Studio 4K 12X before: 8.3.32
* Studio 4K 20X before: 8.3.32
* Studio SE 12X before: 8.3.32
* Studio SE 20X before: 8.3.32
* All Generation 2 cameras, including: PT12X-SDI-GY-G2, PT12X-SDI-WH-G2, PT12X-NDI-GY-G2, PT12X-NDI-WH-G2; PT12X-USB-GY-G2, PT12X-USB-WH-G2; PT20X-SDI-GY-G2, PT20X-SDI-WH-G2, PT20X-NDI-GY-G2, PT20X-NDI-WH-G2; PT20X-USB-GY-G2, PT20X-USB-WH-G2; PT30X-SDI-GY-G2, PT30X-SDI-WH-G2, PT30X-NDI-GY-G2, PT30X-NDI-WH-G2; PTVL-ZCAM, PTVL-NDI-ZCAM; PTEPTZ-ZCAM-G2, PTEPTZ-NDI-ZCAM-G2; PT12X-ZCAM, PT12X-NDI-ZCAM; PT20X-ZCAM, PT20X-NDI-ZCAM; Studio Pro - All versions
* Upgrade Tool - All versions
Published: 2026-09-30
Score: 9.1 Critical
EPSS: < 1% Very Low
KEV: No
Impact: Remote Code Execution
Action: Immediate Patch
AI Analysis

Impact

A missing authentication flaw in the firmware upload interface of PTZOptics cameras allows an unauthenticated user to upload arbitrary firmware. The flaw can be leveraged to install modified firmware that executes on the device, granting full control, persistence, and the ability to exfiltrate data or disrupt operations. The vulnerability is classified as CWE‑306 (Missing Authentication).

Affected Systems

The flaw affects all PTZOptics camera models and the Upgrade Tool, including Version 4K 12X/20X/30X, Move 4K 12X/20X/30X, Move SE 12X/20X/30X, Link 4K 12X/20X/30X, Studio 4K 12X/20X, Studio SE 12X/20X, Generation‑2 cameras such as PT12X/20X/30X variants, ZCAM and NDI/SDI models, and the PTVL and PTEPTZ ZCAM series. The CVE lists specific firmware versions that must be installed to remediate, and all earlier releases are vulnerable.

Risk and Exploitability

The CVSS score of 9.1 indicates a critical severity. Although the EPSS score is not available, the lack of a KEV listing suggests no publicly known exploit packages yet, but the nature of the flaw (unauthenticated firmware upload) implies a high likelihood of custom exploitation via remote network access. Attackers would typically target the camera’s management interface from an external or internal network. The flaw’s remote, unauthenticated attack vector, combined with the ability to replace firmware, creates a significant risk of full device compromise.

Generated by OpenCVE AI on September 30, 2026 at 18:15 UTC.

Remediation

Vendor Solution

ProductRemediationMove 4K 12XUpdate to Firmware 0.0.98.Move 4K 20XUpdate to Firmware 0.1.33.Move 4K 30XUpdate to Firmware 2.1.17.Link 4K 12XUpdate to Firmware 0.0.99.Link 4K 20XUpdate to Firmware 0.1.37.Link 4K 30XUpdate to Firmware 2.1.18.Move SE 12X Update to Firmware 9.1.66.Move SE 20X Update to Firmware 9.1.44.Move SE 30X Update to Firmware 9.1.46.Studio 4K 12XUpdate to Firmware 8.3.32Studio 4K 20XUpdate to Firmware 8.3.32.Studio SE 12XUpdate to Firmware 8.3.32.Studio SE 20XUpdate to Firmware 8.3.32

Vendor Workaround

* Disable network services until the firmware can be updated. * Restrict access to the camera to a trusted management VLAN.

OpenCVE Recommended Actions

  • Upgrade each affected device to the firmware version specified in the PDA remediation guide (e.g., Move 4K 12X to firmware 0.0.98, Move 4K 20X to 0.1.33, Link 4K 30X to 2.1.18, etc.).
  • Disable network services on the camera until the firmware is updated to block unauthenticated access.
  • Restrict camera connections to a trusted management VLAN to limit exposure to potential attackers.

Generated by OpenCVE AI on September 30, 2026 at 18:15 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

References
Link Providers
https://psirt.havsys.com/ cve-icon cve-icon
History

Wed, 30 Sep 2026 20:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Wed, 30 Sep 2026 16:45:00 +0000

Type Values Removed Values Added
Description Missing authentication for critical function vulnerability for all PTZOptics cameras and the Firmware Upgrade Tool - Firmware Update modules. A missing authentication vulnerability in the firmware update mechanism of affected PTZOptics cameras allows an unauthenticated user to install modified firmware on the device without administrator credentials. This vulnerability allows attackers to upload modified firmware to the device without admin credentials. This issue affects: * Move 4K 12X before: 0.0.98 * Move 4K 20X before: 0.1.33 * Move 4K 30X before: 2.1.17 * Link 4K 12X before: 0.0.99 * Link 4K 20X before: 0.1.37 * Link 4K 30X before: 2.1.18 * Move SE 12X before: 9.1.66 * Move SE 20X before: 9.1.44 * Move SE 30X before: 9.1.46 * Studio 4K 12X before: 8.3.32 * Studio 4K 20X before: 8.3.32 * Studio SE 12X before: 8.3.32 * Studio SE 20X before: 8.3.32 * All Generation 2 cameras, including: PT12X-SDI-GY-G2, PT12X-SDI-WH-G2, PT12X-NDI-GY-G2, PT12X-NDI-WH-G2; PT12X-USB-GY-G2, PT12X-USB-WH-G2; PT20X-SDI-GY-G2, PT20X-SDI-WH-G2, PT20X-NDI-GY-G2, PT20X-NDI-WH-G2; PT20X-USB-GY-G2, PT20X-USB-WH-G2; PT30X-SDI-GY-G2, PT30X-SDI-WH-G2, PT30X-NDI-GY-G2, PT30X-NDI-WH-G2; PTVL-ZCAM, PTVL-NDI-ZCAM; PTEPTZ-ZCAM-G2, PTEPTZ-NDI-ZCAM-G2; PT12X-ZCAM, PT12X-NDI-ZCAM; PT20X-ZCAM, PT20X-NDI-ZCAM; Studio Pro - All versions * Upgrade Tool - All versions
Title PTZOptics Missing Authentication in Firmware Upload
Weaknesses CWE-306
References
Metrics cvssV4_0

{'score': 9.1, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/R:U/V:C/RE:L/U:Red'}

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: hsi

Published:

Updated: 2026-09-30T20:01:02.432Z

Reserved: 2026-08-18T17:26:08.229Z

Link: CVE-2026-75969

cve-icon Vulnrichment

Updated: 2026-09-30T18:30:20.391Z

cve-icon NVD

Status : Deferred

Published: 2026-09-30T17:16:49.583

Modified: 2026-09-30T21:17:13.377

Link: CVE-2026-75969

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-30T18:30:10Z

Weaknesses
  • CWE-306

    Missing Authentication for Critical Function