CVE-2025-10365 is an authentication bypass vulnerability affecting the Evertz SDVN 3080ipx-10G, a high-bandwidth Ethernet switching fabric for video applications. This flaw allows remote, unauthenticated attackers to bypass authentication on the web management interface. The vulnerability carries a critical CVSS score of 9.3, indicating a high attack vector and low complexity, potentially leading to arbitrary command execution with root privileges. While there is no known active exploitation, public exploit code, or significant community discussion at this time, the potential impact includes severe business disruption such as interruption or modification of media streaming.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
| Evertz | 3080ipx-10G | 0CNA affecteddefault affected | |
| Evertz | 5782XPS-APP-4E | 0CNA affecteddefault affected | |
| Evertz | 7890IXG | 0CNA affecteddefault affected | |
| Evertz | CC Access Server | 0CNA affecteddefault affected | |
| Evertz | MViP-II | 0CNA affecteddefault affected |
CVSS version used by this source: 4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:X/V:C/RE:X/U:X
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.