CVE-2025-57437

The Blackmagic Web Presenter HD firmware version 3.3 exposes sensitive information via an unauthenticated Telnet service on port 9977

Critical · published September 22, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
44.2
In the wild
Unconfirmed
What it is

🚨 You might want to check your Blackmagic Web Presenter HD! An unauthenticated Telnet service on port 9977 is spilling the beans on sensitive device configuration. 🔥 Think of it like a hotel front desk that hands out room keys to anyone asking without checking IDs — it could lead to some very unwelcome guests wandering around! An attacker could exploit this vulnerability to access crucial configuration data, including stream keys and URLs, allowing them to hijack live streams or conduct network reconnaissance. Imagine someone hijacking your live broadcast just because you left the door wide open — absolutely devastating!

Put simply

Think of it like a hotel front desk that hands out room keys to anyone asking without checking IDs — it could lead to some very unwelcome guests wandering around! This vulnerability in Blackmagic Web Presenter HD firmware version 3.3 exposes sensitive information through an unauthenticated Telnet service, revealing details like network settings and stream keys.

What to do

An attacker could exploit this vulnerability to access crucial configuration data, including stream keys and URLs, allowing them to hijack live streams or conduct network reconnaissance. Imagine someone hijacking your live broadcast just because you left the door wide open — absolutely devastating! Immediately disable the Telnet service on port 9977 and consider upgrading your firmware to the latest version to eliminate this risk. Regularly audit your device settings for any other potential vulnerabilities! You're on the right track! With these steps, you'll tighten your security and keep those streams safe! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00533 · 44.2th percentile
Published
2025-09-22T00:00Z
EPSS history
Timeline
  • 22 SEP 00:00Z
    The Blackmagic Web Presenter HD firmware version 3.3 exposes sensitive information via an unauthenticated Telnet service on port 9977
    cvelistv5