CVE-2025-57432

Summary

Blackmagic Web Presenter version 3.3 exposes a Telnet service on port 9977 that accepts unauthenticated commands. This service allows remote attackers to manipulate stream settings, including changing video modes and possibly altering device functionality. No credentials or authentication mechanisms are required to interact with the Telnet interface.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: yes
  • Technical Impact: total

Additional References

• https://github.com/shiky8/my–cve-vulnerability-research/tree/main/CVE-2025-57432

References

• https://www.blackmagicdesign.com/
• https://github.com/shiky8/my–cve-vulnerability-research/tree/main/CVE-2025-57432

• ←Previous
• Next→