CVE-2025-57437 Information disclosure in n/a
Unauthenticated Telnet access exposes sensitive device configuration and streaming credentials, enabling stream hijacking and network reconnaissance.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-57437?
CVE-2025-57437 is a critical vulnerability in n/a, published on 22 Sep 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The Blackmagic Web Presenter HD firmware version 3.3 exposes sensitive information via an unauthenticated Telnet service on port 9977. When connected, the service reveals extensive device configuration data including: - Model, version, and unique identifiers - Network settings including IP, MAC, DNS - Current stream platform, stream key, and streaming URL - Audio/video configuration This data can be used to hijack live streams or perform network reconnaissance.
Weakness: CWE-200
Which versions are affected by CVE-2025-57437?
It affects 1 product.
Products include Blackmagicdesign Web Presenter Hd Firmware.
How do I fix CVE-2025-57437?
No fix has been published for CVE-2025-57437 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-57437 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-57437 exists.
Sources
Also known as GHSA-37c8-3pmc-qm47.