Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Teradek, LLC Component: Vidiu Mini Firmware Clear all filters
TI-2019-15306 CVE-2019-25252 · GHSA-wwpx-mj82-gp77

Teradek VidiU Pro 3.0.3 Cross-Site Request Forgery via Password Change

Priority MEDIUM 56

Teradek VidiU Pro 3.0.3 contains a cross-site request forgery vulnerability that allows attackers to change administrative passwords without proper request validation.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00182 Published 2025-12-24 No fix listed CWE-352
TI-2019-15305 CVE-2019-25251 · GHSA-8q4f-5f8r-vp4w

Teradek VidiU Pro 3.0.3 Server-Side Request Forgery via RTMP Settings

Priority HIGH 70

Teradek VidiU Pro 3.0.3 contains a server-side request forgery vulnerability in the management interface that allows attackers to manipulate GET parameters 'url' and 'xml_url'.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00333 Published 2025-12-24 No fix listed CWE-918