Critical · published September 22, 2025
🚨 An unauthenticated Telnet service is wide open on Blackmagic Web Presenter 3.3! This means anyone can stroll right in and mess with your stream settings without breaking a sweat. 🔥 Think of it as a restaurant where the front door is unlocked, and anyone can just walk in to change the menu — you wouldn’t want a rogue chef altering your special of the day! An attacker could remotely change video modes or control device functionality, leading to disruptions in your broadcasts or even unauthorized access to sensitive streams. This could be absolutely devastating for live events or critical communications. 🙅♂️
Think of it as a restaurant where the front door is unlocked, and anyone can just walk in to change the menu — you wouldn’t want a rogue chef altering your special of the day! CVE-2025-57432 allows attackers to send unauthenticated commands to the Telnet service running on port 9977, enabling them to manipulate the device's streaming settings without needing any credentials.
An attacker could remotely change video modes or control device functionality, leading to disruptions in your broadcasts or even unauthorized access to sensitive streams. This could be absolutely devastating for live events or critical communications. 🙅♂️ Immediately disable the Telnet service on port 9977 or apply the latest patches from Blackmagic to secure your device. Also, consider implementing network segmentation to limit access to sensitive devices. 🛡️ You've got this! With these steps, you can secure your streaming setup in no time. 🚀