CVE-2025-4009

The CVE-2025-4009 family concerns Evertz SDVN 3080ipx-10G devices (web management on port 80, PHP/webEASY SDK). Two endpoints are affected: feature-transfer-import.php and feature-transfer-export.php, both allowing arbitrary command injection. Remote, unauthenticated attackers can gain arbitrary ...