Command Injection Vulnerability in Evertz SDVN 3080ipx-10G Web Management Interface

CVE-2025-10364

What is CVE-2025-10364?

The Evertz SDVN 3080ipx-10G device, designed for high bandwidth Ethernet switching in video applications, features a web management interface that is susceptible to command injection vulnerabilities. This interface operates on port 80 and allows administrators to manage device features, configure network switching, and handle licensing. However, flaws in its authentication mechanism can lead to unauthorized access, enabling remote attackers to execute arbitrary commands with elevated privileges. Such exploitation could severely impact media streaming operations, including disruptions in content delivery and modifications to streamed media.

References