{"cvss":0.0,"datePublished":"2024-09-17T00:00:00Z","dateUpdated":"2024-09-17T00:00:00Z","description":"PTZOptics PT30X-SDI/NDI cameras contain an OS command injection vulnerability that allows a remote, authenticated attacker to escalate privileges to root via a crafted payload with the ntp_addr parameter of the /cgi-bin/param.cgi CGI script. ","dueDate":"2024-11-25T00:00:00Z","id":"CVE-2024-8957","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Known","product":"PT30X-SDI/NDI Cameras","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","severity":"CRITICAL","source":"vulncheck_kev","title":"PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability","vendor":"PTZOptics"}