Read the docs

Teradek, LLC

Records10All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Teradek, LLC records in CISA KEV

No Teradek, LLC vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Vidiu Firmware 3 records HIGH Vidiu Mini Firmware 3 records HIGH Slice Firmware 2 records MEDIUM Vidiu Pro Firmware 2 records HIGH Bond 2 Firmware 1 record LOW Bond Firmware 1 record LOW Bond Pro Firmware 1 record LOW Brik Firmware 1 record LOW

Records

10 records

TI-2019-15305 CVE-2019-25251 · GHSA-8q4f-5f8r-vp4w

Teradek VidiU Pro 3.0.3 Server-Side Request Forgery via RTMP Settings

Priority HIGH 70

Teradek VidiU Pro 3.0.3 contains a server-side request forgery vulnerability in the management interface that allows attackers to manipulate GET parameters 'url' and 'xml_url'.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00333 Published 2025-12-24 No fix listed CWE-918
TI-2019-15306 CVE-2019-25252 · GHSA-wwpx-mj82-gp77

Teradek VidiU Pro 3.0.3 Cross-Site Request Forgery via Password Change

Priority MEDIUM 56

Teradek VidiU Pro 3.0.3 contains a cross-site request forgery vulnerability that allows attackers to change administrative passwords without proper request validation.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00182 Published 2025-12-24 No fix listed CWE-352
TI-2018-15381 CVE-2018-25156 · GHSA-m2m8-9ppp-q3c7

Teradek Cube 7.3.6 Cross-Site Request Forgery Password Change

Priority MEDIUM 56

Teradek Cube 7.3.6 contains a cross-site request forgery vulnerability that allows attackers to change administrative passwords without proper request validation.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.002 Published 2025-12-24 No fix listed CWE-352
TI-2018-15380 CVE-2018-25155 · GHSA-86rg-f667-jpq7

Teradek Slice 7.3.15 Cross-Site Request Forgery via Password Change

Priority MEDIUM 56

Teradek Slice 7.3.15 contains a cross-site request forgery vulnerability that allows attackers to change administrative passwords without proper request validation.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.002 Published 2025-12-24 No fix listed CWE-352
TI-2021-15335 CVE-2021-37376 · GHSA-7xrr-p6hm-9f5f

Cross Site Scripting (XSS) vulnerability in Teradek Bond, Bond 2 and Bond Pro firmware…

Priority LOW 27

Cross Site Scripting (XSS) vulnerability in Teradek Bond, Bond 2 and Bond Pro firmware version 7.3.x and earlier allows remote attackers to run arbitrary code via the Friendly Name field in System Information Settings.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00614 Published 2023-02-03 No fix listed CWE-79
Open these records in search →