Critical · published September 22, 2025
🚨 An unauthenticated Telnet service on port 9990 is leaking sensitive information from the Blackmagic ATEM Mini Pro 2.7 — it's like leaving the doors wide open at a tech convention! 🔥 Imagine a conference where you can access detailed attendee lists and scheduling information just by walking in — that’s what this vulnerability does for attackers! They can learn your setup and plan further attacks with ease. With this access, an attacker could gather critical reconnaissance data like your video mode, routing configurations, and device identifiers, allowing them to craft sophisticated attacks. This exposure could lead to unauthorized access to streams and a complete compromise of your setup.
Imagine a conference where you can access detailed attendee lists and scheduling information just by walking in — that’s what this vulnerability does for attackers! They can learn your setup and plan further attacks with ease. This vulnerability arises from an unauthenticated Telnet service on port 9990 that exposes device and stream configuration information, enabling attackers to gather sensitive details without any authentication requirements.
With this access, an attacker could gather critical reconnaissance data like your video mode, routing configurations, and device identifiers, allowing them to craft sophisticated attacks. This exposure could lead to unauthorized access to streams and a complete compromise of your setup. To mitigate this risk, disable the Telnet service on port 9990 immediately and ensure your devices are running the latest firmware. Consider implementing network segmentation and firewall rules to restrict access to sensitive services. You’ve got this! With a few swift actions, you can close this door and keep your streaming setup safe! 🛡️