B
lackmagic Web Presenter version 3.3 exposes a Telnet service on port 9977 that accepts unauthenticated commands. This service allows remote attackers to manipulate stream settings, including changing video modes and possibly altering device functionality. No credentials or authentication mechanisms are required to interact with the Telnet interface.
References
| Link | Resource |
|---|---|
| https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-57432 | Exploit Third Party Advisory |
| https://www.blackmagicdesign.com/ | Product |
| https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-57432 | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
Configuration 2 (hide)
| AND |
|
History
14 Oct 2025, 19:56
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Blackmagicdesign web Presenter Hd Firmware
Blackmagicdesign Blackmagicdesign web Presenter 4k Firmware Blackmagicdesign web Presenter Hd Blackmagicdesign web Presenter 4k |
|
| References | () https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-57432 - Exploit, Third Party Advisory | |
| References | () https://www.blackmagicdesign.com/ - Product | |
| CPE | cpe:2.3:h:blackmagicdesign:web_presenter_4k:-:*:*:*:*:*:*:* cpe:2.3:o:blackmagicdesign:web_presenter_hd_firmware:3.3:*:*:*:*:*:*:* cpe:2.3:o:blackmagicdesign:web_presenter_4k_firmware:3.3:*:*:*:*:*:*:* cpe:2.3:h:blackmagicdesign:web_presenter_hd:-:*:*:*:*:*:*:* |
23 Sep 2025, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-09-22 16:15
Updated : 2025-10-14 19:56
NVD link : CVE-2025-57432
Mitre link : CVE-2025-57432
CVE.ORG link : CVE-2025-57432
JSON object : View
Products Affected
CWE
CWE-306
Missing Authentication for Critical Function