PT-2025-23064 · Evertz · Evertz Svdn 3080Ipx-10G

Q. Kaiser · Published 2025-05-28 · Updated 2025-10-03 · CVE-2025-4009

Positive Technologies (AI Summary)

CVSS v4.0

9.3

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:X/V:C/RE:X/U:X

Name of the Vulnerable Software and Affected Versions Evertz SDVN 3080ipx-10G (affected versions not specified)

Description The Evertz SDVN 3080ipx-10G is a High Bandwidth Ethernet Switching Fabric for Video Application that exposes a web management interface on port 80. This interface has two endpoints that are vulnerable to arbitrary command injection and the authentication mechanism has a flaw leading to authentication bypass. Remote unauthenticated attackers can gain arbitrary command execution with elevated privileges on affected devices. This level of access could lead to serious business impact such as the interruption of media streaming, modification of media being streamed, alteration of closed captions being generated, among others.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Command Injection

Improper Authentication

Weakness Enumeration

CWE-77

CWE-287

Related Identifiers

CVE-2025-4009

Affected Products

Evertz Svdn 3080Ipx-10G

References · 28

• https://nvd.nist.gov/vuln/detail/CVE-2025-4009 · Security Note
• https://twitter.com/qkaiser/status/1936685274408612079 · Twitter Post
• https://twitter.com/_r_netsec/status/1927654352400826654 · Twitter Post
• https://twitter.com/secharvesterx/status/1927696514534502564 · Twitter Post
• https://twitter.com/CveFindCom/status/1966504472646955423 · Twitter Post
• https://t.me/CVEtracker/32374 · Telegram Post
• https://onekey.com/resource/security-advisory-remote-code-execution-on-evertz-svdn-cve-2025-4009 · Note
• https://twitter.com/Shari7a0X/status/1936166006390431966 · Twitter Post
• https://twitter.com/UnknownMnz/status/1943358065186856963 · Twitter Post
• https://twitter.com/ET_Labs/status/1940515376510673294 · Twitter Post
• https://t.me/rnetsec/21597 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1927632270023639264 · Twitter Post
• https://t.me/cvenotify/123796 · Telegram Post
• https://twitter.com/CVEnew/status/1927629172966392053 · Twitter Post
• https://t.me/CVEtracker/32373 · Telegram Post