Description
Web 界面有两个端点，容易受到任意命令注入的攻击，并且身份验证机制存在导致身份验证绕过的缺陷。 未经身份验证的远程攻击者可以在受影响的设备上以提升的权限 （root ） 获得任意命令执行
Evertz SDVN 3080ipx-10G 远程命令执行（CVE-2025-4009）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2025-4009
https://www.onekey.com/resource/security-advisory-remote-code-execution-on-evertz-svdn-cve-2025-4009
https://evertz.com/resources/CVE-2025-4009.pdf
https://cve.imfht.com/detail/CVE-2025-4009
https://www.ddpoc.com/DVB-2025-9400.html
https://advisories.checkpoint.com/defense/advisories/public/2025/cpai-2025-0580.html/
https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-4009.yaml
https://gbhackers.com/evertz-sdn-vulnerabilities/
https://www.sentinelone.com/vulnerability-database/cve-2025-4009/
https://pentest-tools.com/vulnerabilities-exploits/evertz-sdvn-3080ipx-10g-unauthenticated-arbitrary-command-injection_27224