TZOptics and possibly other ValueHD-based pan-tilt-zoom cameras use hard-coded, default administrative credentials. The passwords can readily be cracked. Many cameras have SSH or telnet listening on all interfaces. The passwords cannot be changed by the user, nor can the SSH or telnet service be disabled by the user.
| Link | Resource |
|---|---|
| https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-162-10.json | Third Party Advisory |
| https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-10 | Third Party Advisory US Government Resource |
| https://www.cve.org/CVERecord?id=CVE-2025-35451 | Third Party Advisory |
| https://www.greynoise.io/blog/greynoise-intelligence-discovers-zero-day-vulnerabilities-in-live-streaming-cameras-with-the-help-of-ai | Third Party Advisory |
| https://www.labs.greynoise.io/grimoire/2024-10-31-sift-0-day-rce/ | Exploit Third Party Advisory |
Configuration 1 (hide)
| AND |
|
Configuration 2 (hide)
| AND |
|
Configuration 3 (hide)
| AND |
|
Configuration 4 (hide)
| AND |
|
Configuration 5 (hide)
| AND |
|
Configuration 6 (hide)
| AND |
|
Configuration 7 (hide)
| AND |
|
Configuration 8 (hide)
| AND |
|
Configuration 9 (hide)
| AND |
|
Configuration 10 (hide)
| AND |
|
Configuration 11 (hide)
| AND |
|
Configuration 12 (hide)
| AND |
|
Configuration 13 (hide)
| AND |
|
Configuration 14 (hide)
| AND |
|
Configuration 15 (hide)
| AND |
|
Configuration 16 (hide)
| AND |
|
Configuration 17 (hide)
| AND |
|
Configuration 18 (hide)
| AND |
|
Configuration 19 (hide)
| AND |
|
Configuration 20 (hide)
| AND |
|
Configuration 21 (hide)
| AND |
|
Configuration 22 (hide)
| AND |
|
Configuration 23 (hide)
| AND |
|
Configuration 24 (hide)
| AND |
|
Configuration 25 (hide)
| AND |
|
Configuration 26 (hide)
| AND |
|
Configuration 27 (hide)
| AND |
|
Configuration 28 (hide)
| AND |
|
Configuration 29 (hide)
| AND |
|
Configuration 30 (hide)
| AND |
|
Configuration 31 (hide)
| AND |
|
Configuration 32 (hide)
| AND |
|
Configuration 33 (hide)
| AND |
|
Configuration 34 (hide)
| AND |
|
Configuration 35 (hide)
| AND |
|
Configuration 36 (hide)
| AND |
|
Configuration 37 (hide)
| AND |
|
Configuration 38 (hide)
| AND |
|
Configuration 39 (hide)
| AND |
|
Configuration 40 (hide)
| AND |
|
Configuration 41 (hide)
| AND |
|
Configuration 42 (hide)
| AND |
|
Configuration 43 (hide)
| AND |
|
Configuration 44 (hide)
| AND |
|
Configuration 45 (hide)
| AND |
|
Configuration 46 (hide)
| AND |
|
Configuration 47 (hide)
| AND |
|
Configuration 48 (hide)
| AND |
|
Configuration 49 (hide)
| AND |
|
Configuration 50 (hide)
| AND |
|
Configuration 51 (hide)
| AND |
|
14 Jan 2026, 15:33
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Valuehd v60xl Firmware
Smtav ba12s Ptzoptics pteptz-ndi-zcam-g2 Valuehd v71uvs Valuehd vx701ra Firmware Valuehd vx70uvs Valuehd vx720l Firmware Ptzoptics pteptz-zcam-g2 Firmware Valuehd vx630al Firmware Smtav ba20-n Firmware Valuehd vx60asl Firmware Ptzoptics ndi Fixed Camera Valuehd vx61asl Firmware Smtav ba20s Firmware Valuehd vx60al Firmware Ptzoptics vl Fixed Camera Firmware Valuehd vx752a Valuehd vx720l Multicam-systems mcamii Ptz Smtav bv20s Ptzoptics pteptz-zcam-g2 Ptzoptics ndi Fixed Camera Firmware Smtav ba30s Firmware Valuehd vx60al Valuehd vx71uvs Smtav ba30-n Firmware Ptzoptics pt12x-ndi-xx Firmware Smtav hd17h Firmware Smtav bv20s Firmware Valuehd vx751ba Firmware Ptzoptics ptvl-zcam Firmware Smtav ba30s Valuehd vx71uvs Firmware Valuehd v61w Multicam-systems mcamii Ptz Firmware Ptzoptics Valuehd vx701ta Ptzoptics pt12x-zcam Firmware Ptzoptics pt30x-ndi-xx Smtav hd17h Ptzoptics pt20x-zcam Firmware Ptzoptics pt20x-ndi-xx Firmware Valuehd vx61basl Firmware Valuehd vx61al Valuehd vx701ra Smtav bx20n Smtav bx30s Valuehd v61w Firmware Ptzoptics pt12x-ndi-xx Smtav bx20uhd Firmware Valuehd vx60asl Valuehd vx800i2 Firmware Smtav Ptzoptics pt12x-sdi-xx-g2 Firmware Ptzoptics pt30x-sdi-xx-g2 Firmware Smtav ba30-n Valuehd vx90 Valuehd vx90 Firmware Ptzoptics pt12x-usb-xx-g2 Valuehd Valuehd v71uvs Firmware Valuehd v63xl Smtav bx20s-sh Firmware Smtav bx20uhd-n Firmware Smtav bx30s Firmware Valuehd vx751ba Smtav hd17h-n Ptzoptics pt20x-zcam Valuehd vx752a Firmware Ptzoptics vl Fixed Camera Ptzoptics pt12x-zcam Valuehd v60xl Ptzoptics pt20x-sdi-xx-g2 Firmware Valuehd vx630al Valuehd vx70uvs Firmware Ptzoptics pt20x-usb-xx-g2 Valuehd vx61al Firmware Valuehd vx61basl Smtav hd17h-n Firmware Smtav bx20uhd-n Valuehd vx61asl Ptzoptics pt30x-ndi-xx Firmware Smtav ba12-n Firmware Ptzoptics pteptz-ndi-zcam-g2 Firmware Smtav bv30s Firmware Valuehd v63xl Firmware Ptzoptics pt20x-sdi-xx-g2 Smtav bx20uhd Smtav ba20-n Ptzoptics pt20x-ndi-xx Smtav ba12s Firmware Smtav bv30s Valuehd vx752ag Ptzoptics pt30x-sdi-xx-g2 Smtav ba12-n Valuehd vx701ta Firmware Ptzoptics ptvl-zcam Valuehd vx752ag Firmware Ptzoptics pt12x-usb-xx-g2 Firmware Ptzoptics pt20x-usb-xx-g2 Firmware Smtav ba20s Ptzoptics pt12x-sdi-xx-g2 Smtav bx20s-sh Valuehd vx800i2 Smtav bx20n Firmware Multicam-systems |
|
| CPE | cpe:2.3:h:smtav:bx20n:*:*:*:*:*:*:*:* cpe:2.3:o:smtav:ba20s_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:valuehd:vx751ba:*:*:*:*:*:*:*:* cpe:2.3:o:valuehd:vx752ag_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:smtav:bx30s_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:valuehd:vx800i2:*:*:*:*:*:*:*:* cpe:2.3:h:valuehd:v61w:*:*:*:*:*:*:*:* cpe:2.3:h:valuehd:vx630al:*:*:*:*:*:*:*:* cpe:2.3:o:ptzoptics:pt20x-sdi-xx-g2_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:smtav:ba20s:*:*:*:*:*:*:*:* cpe:2.3:o:valuehd:vx720l_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:multicam-systems:mcamii_ptz:*:*:*:*:*:*:*:* cpe:2.3:h:valuehd:vx752a:*:*:*:*:*:*:*:* cpe:2.3:o:ptzoptics:pt30x-ndi-xx_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:smtav:ba20-n_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:valuehd:vx701ra_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:ptzoptics:ndi_fixed_camera:-:*:*:*:*:*:*:* cpe:2.3:h:ptzoptics:pt20x-sdi-xx-g2:-:*:*:*:*:*:*:* cpe:2.3:o:smtav:bv20s_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:ptzoptics:pt20x-usb-xx-g2:-:*:*:*:*:*:*:* cpe:2.3:o:ptzoptics:ndi_fixed_camera_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:smtav:bx20n_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:ptzoptics:pt12x-sdi-xx-g2_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:smtav:bx20uhd:*:*:*:*:*:*:*:* cpe:2.3:h:valuehd:vx752ag:*:*:*:*:*:*:*:* cpe:2.3:h:valuehd:vx701ta:*:*:*:*:*:*:*:* cpe:2.3:o:ptzoptics:pt20x-zcam_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:valuehd:v60xl:*:*:*:*:*:*:*:* cpe:2.3:o:valuehd:vx61asl_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:smtav:hd17h-n:*:*:*:*:*:*:*:* cpe:2.3:h:ptzoptics:pt30x-sdi-xx-g2:-:*:*:*:*:*:*:* cpe:2.3:o:valuehd:v61w_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:valuehd:vx60asl_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:valuehd:vx701ra:*:*:*:*:*:*:*:* cpe:2.3:o:valuehd:v63xl_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:valuehd:vx752a_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:smtav:bv30s:*:*:*:*:*:*:*:* cpe:2.3:o:valuehd:vx800i2_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:valuehd:vx630al_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:valuehd:vx70uvs_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:valuehd:v60xl_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:valuehd:vx60al:*:*:*:*:*:*:*:* cpe:2.3:o:ptzoptics:pt12x-ndi-xx_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:ptzoptics:vl_fixed_camera_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:valuehd:vx90:*:*:*:*:*:*:*:* cpe:2.3:h:smtav:bx20s-sh:*:*:*:*:*:*:*:* cpe:2.3:o:ptzoptics:pt20x-usb-xx-g2_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:ptzoptics:pt12x-zcam_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:smtav:bx20uhd-n:*:*:*:*:*:*:*:* cpe:2.3:o:multicam-systems:mcamii_ptz_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:smtav:ba12-n:*:*:*:*:*:*:*:* cpe:2.3:h:valuehd:v71uvs:*:*:*:*:*:*:*:* cpe:2.3:o:ptzoptics:pt20x-ndi-xx_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:valuehd:vx70uvs:*:*:*:*:*:*:*:* cpe:2.3:o:valuehd:vx90_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:smtav:hd17h-n_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:ptzoptics:ptvl-zcam_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:valuehd:vx60al_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:smtav:bx20uhd-n_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:valuehd:vx751ba_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:ptzoptics:pteptz-ndi-zcam-g2:-:*:*:*:*:*:*:* cpe:2.3:o:smtav:hd17h_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:smtav:bx20s-sh_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:ptzoptics:ptvl-zcam:-:*:*:*:*:*:*:* cpe:2.3:h:ptzoptics:vl_fixed_camera:-:*:*:*:*:*:*:* cpe:2.3:o:smtav:ba12s_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:ptzoptics:pt12x-sdi-xx-g2:-:*:*:*:*:*:*:* cpe:2.3:h:valuehd:vx61asl:*:*:*:*:*:*:*:* cpe:2.3:h:valuehd:vx61al:*:*:*:*:*:*:*:* cpe:2.3:h:smtav:ba12s:*:*:*:*:*:*:*:* cpe:2.3:o:smtav:ba12-n_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:smtav:ba30s:*:*:*:*:*:*:*:* cpe:2.3:h:valuehd:vx60asl:*:*:*:*:*:*:*:* cpe:2.3:o:valuehd:v71uvs_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:smtav:ba30-n:*:*:*:*:*:*:*:* cpe:2.3:h:ptzoptics:pt30x-ndi-xx:-:*:*:*:*:*:*:* cpe:2.3:o:smtav:ba30-n_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:valuehd:vx61basl:*:*:*:*:*:*:*:* cpe:2.3:o:valuehd:vx61basl_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:ptzoptics:pt20x-zcam:-:*:*:*:*:*:*:* cpe:2.3:h:ptzoptics:pt12x-zcam:-:*:*:*:*:*:*:* cpe:2.3:h:smtav:bx30s:*:*:*:*:*:*:*:* cpe:2.3:h:ptzoptics:pt20x-ndi-xx:-:*:*:*:*:*:*:* cpe:2.3:h:smtav:hd17h:*:*:*:*:*:*:*:* cpe:2.3:h:valuehd:v63xl:*:*:*:*:*:*:*:* cpe:2.3:o:ptzoptics:pt12x-usb-xx-g2_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:ptzoptics:pt30x-sdi-xx-g2_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:ptzoptics:pteptz-zcam-g2_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:ptzoptics:pteptz-ndi-zcam-g2_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:valuehd:vx71uvs:*:*:*:*:*:*:*:* cpe:2.3:h:ptzoptics:pt12x-ndi-xx:-:*:*:*:*:*:*:* cpe:2.3:o:smtav:bv30s_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:smtav:bx20uhd_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:valuehd:vx701ta_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:valuehd:vx71uvs_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:smtav:bv20s:*:*:*:*:*:*:*:* cpe:2.3:h:valuehd:vx720l:*:*:*:*:*:*:*:* cpe:2.3:o:valuehd:vx61al_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:ptzoptics:pteptz-zcam-g2:-:*:*:*:*:*:*:* cpe:2.3:h:smtav:ba20-n:*:*:*:*:*:*:*:* cpe:2.3:h:ptzoptics:pt12x-usb-xx-g2:-:*:*:*:*:*:*:* cpe:2.3:o:smtav:ba30s_firmware:*:*:*:*:*:*:*:* |
|
| References | () https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-162-10.json - Third Party Advisory | |
| References | () https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-10 - Third Party Advisory, US Government Resource | |
| References | () https://www.cve.org/CVERecord?id=CVE-2025-35451 - Third Party Advisory | |
| References | () https://www.greynoise.io/blog/greynoise-intelligence-discovers-zero-day-vulnerabilities-in-live-streaming-cameras-with-the-help-of-ai - Third Party Advisory | |
| References | () https://www.labs.greynoise.io/grimoire/2024-10-31-sift-0-day-rce/ - Exploit, Third Party Advisory |
08 Sep 2025, 16:25
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Published : 2025-09-05 18:15
Updated : 2026-01-14 15:33
NVD link : CVE-2025-35451
Mitre link : CVE-2025-35451
CVE.ORG link : CVE-2025-35451
JSON object : View
- ba20s
- bv20s
- hd17h
- bx20uhd-n_firmware
- bv30s_firmware
- ba20-n_firmware
- ba12-n
- ba20s_firmware
- bx20s-sh
- hd17h-n
- bx20n_firmware
- ba12s
- hd17h-n_firmware
- bx20uhd
- ba20-n
- bx20n
- bx30s
- bx20uhd_firmware
- ba30-n
- bv20s_firmware
- ba12-n_firmware
- bx20s-sh_firmware
- hd17h_firmware
- bv30s
- bx20uhd-n
- ba30s_firmware
- ba30s
- bx30s_firmware
- ba30-n_firmware
- ba12s_firmware
- pteptz-zcam-g2_firmware
- pteptz-ndi-zcam-g2
- pt20x-zcam
- pt20x-ndi-xx
- pt12x-zcam_firmware
- vl_fixed_camera
- pteptz-zcam-g2
- pt20x-zcam_firmware
- pt20x-sdi-xx-g2
- pt30x-sdi-xx-g2_firmware
- vl_fixed_camera_firmware
- ndi_fixed_camera
- pt20x-sdi-xx-g2_firmware
- pt12x-usb-xx-g2_firmware
- pt20x-ndi-xx_firmware
- ptvl-zcam_firmware
- pt30x-ndi-xx_firmware
- pt12x-zcam
- ndi_fixed_camera_firmware
- pt20x-usb-xx-g2
- pt20x-usb-xx-g2_firmware
- pt12x-sdi-xx-g2_firmware
- pt12x-ndi-xx
- pt30x-sdi-xx-g2
- pt12x-usb-xx-g2
- pt12x-ndi-xx_firmware
- pt12x-sdi-xx-g2
- ptvl-zcam
- pteptz-ndi-zcam-g2_firmware
- pt30x-ndi-xx
- vx751ba
- v63xl
- v60xl_firmware
- vx60asl
- vx70uvs
- vx90
- vx60al
- vx630al
- vx720l_firmware
- v71uvs
- vx90_firmware
- vx60asl_firmware
- v63xl_firmware
- vx70uvs_firmware
- vx630al_firmware
- vx61al_firmware
- v61w_firmware
- vx751ba_firmware
- vx60al_firmware
- vx752ag
- vx800i2
- vx61basl_firmware
- vx752a_firmware
- vx61basl
- vx701ra
- vx720l
- vx701ra_firmware
- vx71uvs_firmware
- vx800i2_firmware
- vx752ag_firmware
- vx61asl
- vx701ta_firmware
- vx71uvs
- v71uvs_firmware
- v61w
- vx61asl_firmware
- vx701ta
- vx61al
- v60xl
- vx752a
Use of Hard-coded Credentials