Vulnerabilities

TI-2019-15306 CVE-2019-25252 · GHSA-wwpx-mj82-gp77

Teradek VidiU Pro 3.0.3 Cross-Site Request Forgery via Password Change

MEDIUM 56

Teradek VidiU Pro 3.0.3 contains a cross-site request forgery vulnerability that allows attackers to change administrative passwords without proper request validation.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00182 Published 2025-12-24 No fix listed CWE-352

TI-2019-15305 CVE-2019-25251 · GHSA-8q4f-5f8r-vp4w

Teradek VidiU Pro 3.0.3 Server-Side Request Forgery via RTMP Settings

HIGH 70

Teradek VidiU Pro 3.0.3 contains a server-side request forgery vulnerability in the management interface that allows attackers to manipulate GET parameters 'url' and 'xml_url'.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00333 Published 2025-12-24 No fix listed CWE-918

TI-2018-15381 CVE-2018-25156 · GHSA-m2m8-9ppp-q3c7

Teradek Cube 7.3.6 Cross-Site Request Forgery Password Change

MEDIUM 56

Teradek Cube 7.3.6 contains a cross-site request forgery vulnerability that allows attackers to change administrative passwords without proper request validation.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.002 Published 2025-12-24 No fix listed CWE-352

TI-2018-15380 CVE-2018-25155 · GHSA-86rg-f667-jpq7

Teradek Slice 7.3.15 Cross-Site Request Forgery via Password Change

MEDIUM 56

Teradek Slice 7.3.15 contains a cross-site request forgery vulnerability that allows attackers to change administrative passwords without proper request validation.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.002 Published 2025-12-24 No fix listed CWE-352

TI-2021-15338 CVE-2021-37379 · GHSA-865w-mq7p-j8f4

Cross Site Scripting (XSS) vulnerability in Teradek Sphere all firmware versions allows…

MEDIUM 58

Cross Site Scripting (XSS) vulnerability in Teradek Sphere all firmware versions allows remote attackers to run arbitrary code via the Friendly Name field in System Information Settings.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00589 Published 2023-02-03 No fix listed CWE-79

TI-2021-15336 CVE-2021-37377 · GHSA-4gmg-r65m-fr2x

Cross Site Scripting (XSS) vulnerability in Teradek Brik firmware version 7.2.x and…

LOW 25

Cross Site Scripting (XSS) vulnerability in Teradek Brik firmware version 7.2.x and earlier allows remote attackers to run arbitrary code via the Friendly Name field in System Information Settings.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00589 Published 2023-02-03 No fix listed CWE-79

TI-2021-15335 CVE-2021-37376 · GHSA-7xrr-p6hm-9f5f

Cross Site Scripting (XSS) vulnerability in Teradek Bond, Bond 2 and Bond Pro firmware…

LOW 27

Cross Site Scripting (XSS) vulnerability in Teradek Bond, Bond 2 and Bond Pro firmware version 7.3.x and earlier allows remote attackers to run arbitrary code via the Friendly Name field in System Information Settings.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00614 Published 2023-02-03 No fix listed CWE-79

TI-2021-15334 CVE-2021-37375 · GHSA-84hw-65xp-5cx9

Cross Site Scripting (XSS) vulnerability in Teradek VidiU / VidiU Mini firmware version…

LOW 25

Cross Site Scripting (XSS) vulnerability in Teradek VidiU / VidiU Mini firmware version 3.0.8 and earlier allows remote attackers to run arbitrary code via the Friendly Name field in System Information Settings.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00566 Published 2023-02-03 No fix listed CWE-79

TI-2021-15333 CVE-2021-37374 · GHSA-7p66-5494-38w3

Cross Site Scripting (XSS) vulnerability in Teradek Clip all firmware versions allows…

LOW 25

Cross Site Scripting (XSS) vulnerability in Teradek Clip all firmware versions allows remote attackers to run arbitrary code via the Friendly Name field in System Information Settings.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00566 Published 2023-02-03 No fix listed CWE-79

TI-2021-15332 CVE-2021-37373 · GHSA-gw47-4qv6-6qmx

Cross Site Scripting (XSS) vulnerability in Teradek Slice 1st generation firmware 7.3.x…

LOW 25

Cross Site Scripting (XSS) vulnerability in Teradek Slice 1st generation firmware 7.3.x and earlier allows remote attackers to run arbitrary code via the Friendly Name field in System Information Settings.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00566 Published 2023-02-03 No fix listed CWE-79

Vulnerabilities

Filters