Teradek, LLC

Records10All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Teradek, LLC records in CISA KEV

No Teradek, LLC vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Vidiu Firmware 3 records HIGH Vidiu Mini Firmware 3 records HIGH Slice Firmware 2 records MEDIUM Vidiu Pro Firmware 2 records HIGH Bond 2 Firmware 1 record LOW Bond Firmware 1 record LOW Bond Pro Firmware 1 record LOW Brik Firmware 1 record LOW

Records

3 records in Vidiu Firmware · all components

TI-2019-15305 CVE-2019-25251 · GHSA-8q4f-5f8r-vp4w

Teradek VidiU Pro 3.0.3 Server-Side Request Forgery via RTMP Settings

HIGH 70

Teradek VidiU Pro 3.0.3 contains a server-side request forgery vulnerability in the management interface that allows attackers to manipulate GET parameters 'url' and 'xml_url'.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00333 Published 2025-12-24 No fix listed CWE-918

TI-2019-15306 CVE-2019-25252 · GHSA-wwpx-mj82-gp77

Teradek VidiU Pro 3.0.3 Cross-Site Request Forgery via Password Change

MEDIUM 56

Teradek VidiU Pro 3.0.3 contains a cross-site request forgery vulnerability that allows attackers to change administrative passwords without proper request validation.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00182 Published 2025-12-24 No fix listed CWE-352

TI-2021-15334 CVE-2021-37375 · GHSA-84hw-65xp-5cx9

Cross Site Scripting (XSS) vulnerability in Teradek VidiU / VidiU Mini firmware version…

LOW 25

Cross Site Scripting (XSS) vulnerability in Teradek VidiU / VidiU Mini firmware version 3.0.8 and earlier allows remote attackers to run arbitrary code via the Friendly Name field in System Information Settings.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00566 Published 2023-02-03 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	10
Low	0
No CVSS	0