AVer PTC cameras

An attacker could run arbitrary code on the PTC camera, allowing them to disable video feeds, capture credentials, redirect streams to unauthorized locations, or use the device as a pivot point into your network infrastructure.

Operators and facility managers at water utilities, power plants, and other critical infrastructure sites using AVer PTC500S, PTC115, PTC500+, or PTC115+ cameras for surveillance, process monitoring, or safety system recording should apply the firmware fix immediately. These cameras are often deployed to monitor equipment status and operational safety in unmanned or remote plant areas.

An attacker with network access to the camera (port 443 or management interface) can exploit a file permission vulnerability (CWE-552) to upload and execute arbitrary code without authentication or user interaction.