{"cvss":0.0,"datePublished":"2024-09-17T00:00:00Z","dateUpdated":"2024-09-17T00:00:00Z","description":"PTZOptics PT30X-SDI/NDI cameras contain an insecure direct object reference (IDOR) vulnerability that allows a remote, attacker to bypass authentication for the /cgi-bin/param.cgi CGI script. If combined with CVE-2024-8957, this can lead to remote code execution as root.","dueDate":"2024-11-25T00:00:00Z","id":"CVE-2024-8956","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"PT30X-SDI/NDI Cameras","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability","vendor":"PTZOptics"}