PT-2025-38762 · Blackmagic Design · Atem Mini Pro

Published 2025-09-22 · Updated 2025-10-17 · CVE-2025-57441

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Blackmagic ATEM Mini Pro version 2.7

Description The software exposes sensitive device and stream configuration information through an unauthenticated Telnet service on port 9990. Connecting to this service allows access to a protocol preamble revealing video mode, routing configuration, input/output labels, device model, and unique identifiers. This information can be used for reconnaissance and planning further attacks. The exposed information includes the device model and internal identifiers such as the unique ID.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2025-57441

Affected Products

Atem Mini Pro

References · 6

• 🔥 https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-57441 · Exploit
• https://osv.dev/vulnerability/CVE-2025-57441 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-57441 · Security Note
• https://blackmagicdesign.com · Note
• https://t.me/cveNotify/139266 · Telegram Post
• https://twitter.com/CVEnew/status/1970181487359123746 · Twitter Post