{"id":"CVE-2024-8957","aliases":["EUVD-2024-49506","GHSA-9cx9-7v8g-h36v"],"status":"published","title":"PTZOptics NDI and SDI Cameras Command Injection via NTP Address Configuration","description":"PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an OS command injection issue. The camera does not sufficiently validate the ntp_addr configuration value which may lead to arbitrary command execution when ntp_client is started. When chained with CVE-2024-8956, a remote and unauthenticated attacker can execute arbitrary OS commands on affected devices.","severity":{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.7984,"percentile":0.99612,"model":"v2026.06.15"},"facts":{"in_kev":true,"known_exploited":true,"public_exploit":false,"fix_available":false},"cwes":["CWE-78"],"published":"2024-09-17T20:08:25Z","modified":"2026-06-17T08:23:37Z","kev":{"date_added":"2024-11-04","due_date":"2024-11-25","required_action":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","known_ransomware_use":"Unknown"},"exploitation":[{"source":"euvd","since":"2024-11-04"},{"source":"kev","since":"2024-11-04"}],"products":[{"vendor":"ptzoptics","product":"pt30x-ndi"},{"vendor":"ptzoptics","product":"pt30x-ndi-xx-g2_firmware"},{"vendor":"ptzoptics","product":"pt30x-ndi_firmware"},{"vendor":"ptzoptics","product":"pt30x-sdi"},{"vendor":"ptzoptics","product":"pt30x-sdi/ndi cameras"},{"vendor":"ptzoptics","product":"pt30x-sdi_firmware"}],"references":[{"url":"https://ptzoptics.com/firmware-changelog/","tags":["vendor-advisory","Release Notes"]},{"url":"https://vulncheck.com/advisories/ptzoptics-command-injection","tags":["third-party-advisory","Third Party Advisory"]},{"url":"https://www.labs.greynoise.io/grimoire/2024-10-31-sift-0-day-rce/","tags":["exploit","technical-description","third-party-advisory","Exploit","Third Party Advisory"]},{"url":"https://www.greynoise.io/blog/greynoise-intelligence-discovers-zero-day-vulnerabilities-in-live-streaming-cameras-with-the-help-of-ai","tags":["Third Party Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-8957","tags":["government-resource","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-8957"},{"url":"https://ptzoptics.com/firmware-changelog"},{"url":"https://www.labs.greynoise.io/grimoire/2024-10-31-sift-0-day-rce"},{"url":"https://github.com/advisories/GHSA-9cx9-7v8g-h36v"}],"sources":{"cve":[{"id":"CVE-2024-8957","title":"PTZOptics NDI and SDI Cameras Command Injection via NTP Address Configuration","description":"PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an OS command injection issue. The camera does not sufficiently validate the ntp_addr configuration value which may lead to arbitrary command execution when ntp_client is started. When chained with CVE-2024-8956, a remote and unauthenticated attacker can execute arbitrary OS commands on affected devices.","status":"published","published":"2024-09-17T20:08:25.588Z","modified":"2025-12-27T16:47:39.385Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:34:09.540667Z"}],"euvd":[{"id":"EUVD-2024-49506","description":"PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an OS command injection issue. The camera does not sufficiently validate the ntp_addr configuration value which may lead to arbitrary command execution when ntp_client is started. When chained with CVE-2024-8956, a remote and unauthenticated attacker can execute arbitrary OS commands on affected devices.","status":"published","published":"2024-09-17T20:08:25Z","modified":"2025-12-27T16:47:39Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"exploited_since":"2024-11-04","updated_at":"2026-11-02T19:49:00.939401Z"}],"ghsa":[{"id":"GHSA-9cx9-7v8g-h36v","title":"PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an OS command injection issue....","description":"PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an OS command injection issue. The camera does not sufficiently validate the ntp_addr configuration value which may lead to arbitrary command execution when ntp_client is started. When chained with CVE-2024-8956, a remote and unauthenticated attacker can execute arbitrary OS commands on affected devices.","status":"published","published":"2024-09-17T21:30:33Z","modified":"2025-10-22T00:33:07Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T15:04:07.67458Z"}],"kev":[{"id":"CVE-2024-8957","title":"PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability","description":"PTZOptics PT30X-SDI/NDI cameras contain an OS command injection vulnerability that allows a remote, authenticated attacker to escalate privileges to root via a crafted payload with the ntp_addr parameter of the /cgi-bin/param.cgi CGI script. ","cwes":["CWE-78"],"kev":{"date_added":"2024-11-04","due_date":"2024-11-25","required_action":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","known_ransomware_use":"Unknown"},"updated_at":"2026-11-02T17:00:16.234141Z"}],"nvd":[{"id":"CVE-2024-8957","description":"PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an OS command injection issue. The camera does not sufficiently validate the ntp_addr configuration value which may lead to arbitrary command execution when ntp_client is started. When chained with CVE-2024-8956, a remote and unauthenticated attacker can execute arbitrary OS commands on affected devices.","status":"published","published":"2024-09-17T21:15:13.423Z","modified":"2026-06-17T08:23:37.947Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:10:26.717759Z"}]}}