Teradek

10 CVEs across 23 Teradek products. Browse Teradek vulnerabilities, severities, and proof-of-concept exploits.

Teradek products with known CVEs

ProductCVEs
Vidiu3
Vidiu Firmware3
Vidiu Mini3
Vidiu Mini Firmware3
Slice2
Slice Firmware2
Vidiu Pro2
Vidiu Pro Firmware2
Bond1
Bond 21
Bond 2 Firmware1
Bond Firmware1
Bond Pro1
Bond Pro Firmware1
Brik1
Brik Firmware1
Clip1
Clip Firmware1
Cube1
Cube Firmware1
Sphere1
Sphere Firmware1
Vidiu Pro1
Teradek CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2019-25252Medium4.32025-12-24Teradek VidiU Pro 3.0.3 contains a cross-site request forgery vulnerability that allows attackers to change administrative passwords without proper request val…
CVE-2019-25251Medium6.52025-12-24Teradek VidiU Pro 3.0.3 contains a server-side request forgery vulnerability in the management interface that allows attackers to manipulate GET parameters 'ur…
CVE-2018-25156Medium4.32025-12-24Teradek Cube 7.3.6 contains a cross-site request forgery vulnerability that allows attackers to change administrative passwords without proper request validati…
CVE-2018-25155Medium4.32025-12-24Teradek Slice 7.3.15 contains a cross-site request forgery vulnerability that allows attackers to change administrative passwords without proper request valida…
CVE-2021-37379Medium5.42023-02-03Cross Site Scripting (XSS) vulnerability in Teradek Sphere all firmware versions allows remote attackers to run arbitrary code via the Friendly Name field in S…
CVE-2021-37377Medium5.42023-02-03Cross Site Scripting (XSS) vulnerability in Teradek Brik firmware version 7.2.x and earlier allows remote attackers to run arbitrary code via the Friendly Name…
CVE-2021-37376Medium5.42023-02-03Cross Site Scripting (XSS) vulnerability in Teradek Bond, Bond 2 and Bond Pro firmware version 7.3.x and earlier allows remote attackers to run arbitrary code…
CVE-2021-37375Medium5.42023-02-03Cross Site Scripting (XSS) vulnerability in Teradek VidiU / VidiU Mini firmware version 3.0.8 and earlier allows remote attackers to run arbitrary code via the…
CVE-2021-37374Medium5.42023-02-03Cross Site Scripting (XSS) vulnerability in Teradek Clip all firmware versions allows remote attackers to run arbitrary code via the Friendly Name field in Sys…
CVE-2021-37373Medium5.42023-02-03Cross Site Scripting (XSS) vulnerability in Teradek Slice 1st generation firmware 7.3.x and earlier allows remote attackers to run arbitrary code via the Frien…