CVE-2025-57432

{
  "id": "CVE-2025-57432",
  "sourceIdentifier": "[email protected]",
  "published": "2025-09-22T16:15:44.753",
  "lastModified": "2026-11-05T23:10:00.150",
  "vulnStatus": "Analyzed",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Blackmagic Web Presenter version 3.3 exposes a Telnet service on port 9977 that accepts unauthenticated commands. This service allows remote attackers to manipulate stream settings, including changing video modes and possibly altering device functionality. No credentials or authentication mechanisms are required to interact with the Telnet interface."
    },
    {
      "lang": "es",
      "value": "Blackmagic Web Presenter versión 3.3 expone un servicio Telnet en el puerto 9977 que acepta comandos no autenticados. Este servicio permite a atacantes remotos manipular la configuración de la transmisión, incluyendo cambiar modos de video y posiblemente alterar la funcionalidad del dispositivo. No se requieren credenciales ni mecanismos de autenticación para interactuar con la interfaz Telnet."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "version": "n/a",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "baseScore": 9.8,
          "baseSeverity": "CRITICAL",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 5.9
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2025-09-23T16:04:07.737910Z",
          "id": "CVE-2025-57432",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-306"
        }
      ]
    }
  ],
  "configurations": [
    {
      "operator": "AND",
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:blackmagicdesign:web_presenter_hd_firmware:3.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "7ACF4FB7-6908-4CF9-87A6-40B6136E171B"
            }
          ]
        },
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:blackmagicdesign:web_presenter_hd:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "2078F064-D32A-4BAC-B0AC-20641B30DB55"
            }
          ]
        }
      ]
    },
    {
      "operator": "AND",
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:blackmagicdesign:web_presenter_4k_firmware:3.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "8C651A33-3D9B-4C19-9136-EC5CD86D96EF"
            }
          ]
        },
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:blackmagicdesign:web_presenter_4k:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "ED01C512-99FE-40FF-943A-6841ACBBC7D1"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-57432",
      "source": "[email protected]",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ]
    },
    {
      "url": "https://www.blackmagicdesign.com/",
      "source": "[email protected]",
      "tags": [
        "Product"
      ]
    },
    {
      "url": "https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-57432",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ]
    }
  ]
}