VULNERABILITY INTELLIGENCE

CVE-2025-35451

CVSS score9.8 CRITICAL
EPSS probability0.77%
CISA KEVNot currently listed
Published2025-09-05
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

PTZOptics and possibly other ValueHD-based pan-tilt-zoom cameras use hard-coded, default administrative credentials. The passwords can readily be cracked. Many cameras have SSH or telnet listening on all interfaces. The passwords cannot be changed by the user, nor can the SSH or telnet service be disabled by the user.

Weakness classification

  • 9119a7d8-5eab-497f-8521-727c672e3725: CWE-798

Primary references