Teradek Vidiu Mini
Approved changes feed: RSS · Atom
cpe:2.3:h:teradek:vidiu_mini:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Teradek (3f9544c8-d3d5-5104-98c2-63fc8414c897) |
|---|---|
| Product | Vidiu Mini (f85deb66-f50a-572e-bd23-436a8b35afda) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-37375 |
not_vulnerable | 2026-06-03 14:45:00.483458 |
Details available
Cross Site Scripting (XSS) vulnerability in Teradek VidiU / VidiU Mini firmware version 3.0.8 and earlier allows remote attackers to run arbitrary code via the Friendly Name field in System Information Settings. NOTE: Vedor states the product has reached End of Life and will not be receiving any firmware updates to address this issue.
Published: 2023-02-03T00:00:00.000Z
Updated: 2024-08-04T01:16:03.952Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25252 |
not_vulnerable | 2026-06-03 14:40:18.197609 |
Teradek VidiU Pro 3.0.3 Cross-Site Request Forgery via Password Change
MEDIUM (4.3)
Teradek VidiU Pro 3.0.3 contains a cross-site request forgery vulnerability that allows attackers to change administrative passwords without proper request validation. Attackers can craft malicious web pages that automatically submit password change requests to the device when a logged-in administrator visits the page.
Published: 2025-12-24T19:28:04.078Z
Updated: 2026-03-05T12:02:19.128Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25251 |
not_vulnerable | 2026-06-03 14:40:18.195530 |
Teradek VidiU Pro 3.0.3 Server-Side Request Forgery via RTMP Settings
MEDIUM (6.5)
Teradek VidiU Pro 3.0.3 contains a server-side request forgery vulnerability in the management interface that allows attackers to manipulate GET parameters 'url' and 'xml_url'. Attackers can exploit this flaw to bypass firewalls, initiate network enumeration, and potentially trigger external HTTP requests to arbitrary destinations.
Published: 2025-12-24T19:28:03.642Z
Updated: 2026-01-26T15:55:00.874Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.