TI-2025-09502 Aliases CVE-2025-10365 GHSA-g37v-5m8f-34c3

Authentication Bypass in Evertz SDVN

MEDIUM 57CWE-287Published 2025-09-12 · Updated 2025-09-12

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Attack requirements: None
Impact type: Security bypass
Confidentiality · integrity · availability: High · High · High
Fix status: No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-287.

Summary

The Evertz SDVN 3080ipx-10G is a High Bandwidth Ethernet Switching Fabric for Video Application. This device exposes a web management interface on port 80. This web management interface can be used by administrators to control product features, setup network switching, and register license among other features. The application has been developed in PHP with the webEASY SDK, also named ‘ewb’ by Evertz. This web interface has two endpoints that are vulnerable to arbitrary command injection (CVE-2025-4009, CVE-2025-10364) and the authentication mechanism has a flaw leading to authentication bypass (CVE-2025-10365). Remote unauthenticated attackers can gain arbitrary command execution with elevated privileges ( root ) on affected devices. This level of access could lead to serious business impact such as the interruption of media streaming, modification of media being streamed, alteration of closed captions being generated, among others.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.05637 93rd percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: Yes
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Evertz	3080ipx-10G	all versions	—	No fix listed	CNA
Evertz	MViP-II	all versions	—	No fix listed	CNA
Evertz	cVIP	all versions	—	No fix listed	CNA
Evertz	7890IXG	all versions	—	No fix listed	CNA
Evertz	CC Access Server	all versions	—	No fix listed	CNA
Evertz	5782XPS-APP-4E	all versions	—	No fix listed	CNA

3080ipx-10G VendorEvertz Affected all versions Fixed in — No fix listed CNA
MViP-II VendorEvertz Affected all versions Fixed in — No fix listed CNA
cVIP VendorEvertz Affected all versions Fixed in — No fix listed CNA
7890IXG VendorEvertz Affected all versions Fixed in — No fix listed CNA
CC Access Server VendorEvertz Affected all versions Fixed in — No fix listed CNA
5782XPS-APP-4E VendorEvertz Affected all versions Fixed in — No fix listed CNA

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2025-10365
2026-10-03 Alias added: GHSA-g37v-5m8f-34c3

References

Advisory 1

https://www.onekey.com/resource/security-advisory-remote-code-execution-on-evertz-svdn-cve-2025-4009

TI-2025-03552 Unauthenticated Arbitrary Command Injection in Evertz SDVN CVSS 4.0CRITICAL 9.3
TI-2020-14277 EVERTZ devices 3080IPX exe-guest-v1.2-r26125, 7801FC 1.3 Build 27, and 7890IXG V494 are… CVSS 3.1HIGH 8.8
TI-2025-09501 Unauthenticated Arbitrary Command Injection in Evertz SDVN CVSS 4.0CRITICAL 9.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences