---
title: "Security digest: November 4, 2024"
url: https://erroneo.us/security/2024-11-04/
description: "November 4, 2024 vulnerability digest: 2 CISA KEV additions (PTZOptics); 1 critical advisory (NuGet). What to patch and who can relax."
type: security-digest-day
section: "Security Digest"
date_published: 2024-11-04
date_modified: 2024-11-04
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Security digest: November 4, 2024

2 known exploited (cisa kev) additions and 1 critical advisory.

## Take stock

- Do you run any of these? PTZOptics PT30X-SDI/NDI Cameras. They are being exploited in the wild (CISA KEV). Patch or mitigate if you do; CISA’s federal deadline is 2024-11-25.
- NuGet: 1 critical advisory ( Refit ). Check with dotnet list package --vulnerable --include-transitive .
- None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.

## Known exploited (CISA KEV)

- [CVE-2024-8957](https://erroneo.us/security/cve/CVE-2024-8957/index.md) PTZOptics PT30X-SDI/NDI Cameras: PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability (CISA due 2024-11-25)
- [CVE-2024-8956](https://erroneo.us/security/cve/CVE-2024-8956/index.md) PTZOptics PT30X-SDI/NDI Cameras: PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability (CISA due 2024-11-25)

## Critical advisories

- [CVE-2024-51501](https://erroneo.us/security/cve/CVE-2024-51501/index.md) CRLF injection in Refit's [Header], [HeaderCollection] and [Authorize] attributes — NuGet Refit < 7.2.22 → 7.2.22

---
Source page: https://erroneo.us/security/2024-11-04/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt