← Back

CVE-2025-57432

nvd nist
Published: Sep 22, 2025Modified: Oct 14, 2025

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Blackmagic Web Presenter version 3.3 exposes a Telnet service on port 9977 that accepts unauthenticated commands. This service allows remote attackers to manipulate stream settings, including changing video modes and possibly altering device functionality. No credentials or authentication mechanisms are required to interact with the Telnet interface.

Affected (2)

Blackmagicdesign
2 products
Web Presenter Hd Firmware
Web Presenter 4k Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Web Presenter Hd Firmware
Version 3.3
Running on/withPlatform Versions
Blackmagicdesign
Web Presenter Hd
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Web Presenter 4k Firmware
Version 3.3
Running on/withPlatform Versions
Blackmagicdesign
Web Presenter 4k
All versions

Related CWEs

CWE-306
Missing Authentication for Critical Function
The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

References (3)

Source: cve@mitre.org
ExploitThird Party Advisory
Source: cve@mitre.org
Product
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
ExploitThird Party Advisory

Timeline

No history available yet.