CVE-2025-57432

CRITICAL

9.8

Description

Blackmagic Web Presenter version 3.3 exposes a Telnet service on port 9977 that accepts unauthenticated commands. This service allows remote attackers to manipulate stream settings, including changing video modes and possibly altering device functionality. No credentials or authentication mechanisms are required to interact with the Telnet interface.

Details CVE

Score CVSS v3.19.8

SeveriteCRITICAL

Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vecteur d'attaqueNETWORK

ComplexiteLOW

Privileges requisNONE

Interaction utilisateurNONE

Publie9/22/2025

Derniere modification10/14/2025

Sourcenvd

Observations honeypot0

Produits affectes

blackmagicdesign:web_presenter_4kblackmagicdesign:web_presenter_4k_firmwareblackmagicdesign:web_presenter_hdblackmagicdesign:web_presenter_hd_firmware

Faiblesses (CWE)

CWE-306

References

https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-57432(cve@mitre.org)

https://www.blackmagicdesign.com/(cve@mitre.org)

https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-57432(134c704f-9b21-4f2e-91b3-4a467353bcc0)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.