Teradek records
10 published records for vendor teradek.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')6
- CWE-352 Cross-Site Request Forgery (CSRF)3
- CWE-918 Server-Side Request Forgery (SSRF)1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
10 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
27Monitor | CVE-2019-25251No exploit | Teradek VidiU Pro 3.0.3 Server-Side Request Forgery via RTMP Settingsteradek · vidiu pro firmware · CWE-918 | Medium6.9 | — | 0.3% | Dec 24, 2025 |
21Monitor | CVE-2021-37376No exploit | Cross Site Scripting (XSS) vulnerability in Teradek Bond, Bond 2 and Bond Pro firmware version 7.3.x and earlier allows remote attackers to teradek · bond firmware · CWE-79 | Medium5.4 | — | 0.6% | Feb 3, 2023 |
21Monitor | CVE-2021-37379No exploit | Cross Site Scripting (XSS) vulnerability in Teradek Sphere all firmware versions allows remote attackers to run arbitrary code via the Frienteradek · sphere firmware · CWE-79 | Medium5.4 | — | 0.5% | Feb 3, 2023 |
21Monitor | CVE-2021-37377No exploit | Cross Site Scripting (XSS) vulnerability in Teradek Brik firmware version 7.2.x and earlier allows remote attackers to run arbitrary code viteradek · brik firmware · CWE-79 | Medium5.4 | — | 0.5% | Feb 3, 2023 |
21Monitor | CVE-2021-37374No exploit | Cross Site Scripting (XSS) vulnerability in Teradek Clip all firmware versions allows remote attackers to run arbitrary code via the Friendlteradek · clip firmware · CWE-79 | Medium5.4 | — | 0.5% | Feb 3, 2023 |
21Monitor | CVE-2021-37373No exploit | Cross Site Scripting (XSS) vulnerability in Teradek Slice 1st generation firmware 7.3.x and earlier allows remote attackers to run arbitraryteradek · slice firmware · CWE-79 | Medium5.4 | — | 0.5% | Feb 3, 2023 |
21Monitor | CVE-2021-37375No exploit | Cross Site Scripting (XSS) vulnerability in Teradek VidiU / VidiU Mini firmware version 3.0.8 and earlier allows remote attackers to run arbteradek · vidiu mini firmware · CWE-79 | Medium5.4 | — | 0.5% | Feb 3, 2023 |
20Monitor | CVE-2018-25155No exploit | Teradek Slice 7.3.15 Cross-Site Request Forgery via Password Changeteradek · slice firmware · CWE-352 | Medium5.1 | — | 0.2% | Dec 24, 2025 |
20Monitor | CVE-2018-25156No exploit | Teradek Cube 7.3.6 Cross-Site Request Forgery Password Changeteradek · cube firmware · CWE-352 | Medium5.1 | — | 0.2% | Dec 24, 2025 |
20Monitor | CVE-2019-25252No exploit | Teradek VidiU Pro 3.0.3 Cross-Site Request Forgery via Password Changeteradek · vidiu pro firmware · CWE-352 | Medium5.1 | — | 0.1% | Dec 24, 2025 |
- CVE-2019-2525127Monitor
Teradek VidiU Pro 3.0.3 Server-Side Request Forgery via RTMP Settings
MediumCVSS 6.9No exploitEPSS 0%teradek · vidiu pro firmwareDec 24, 2025
- CVE-2021-3737621Monitor
Cross Site Scripting (XSS) vulnerability in Teradek Bond, Bond 2 and Bond Pro firmware version 7.3.x and earlier allows remote attackers to
MediumCVSS 5.4No exploitEPSS 0%teradek · bond firmwareFeb 3, 2023
- CVE-2021-3737921Monitor
Cross Site Scripting (XSS) vulnerability in Teradek Sphere all firmware versions allows remote attackers to run arbitrary code via the Frien
MediumCVSS 5.4No exploitEPSS 0%teradek · sphere firmwareFeb 3, 2023
- CVE-2021-3737721Monitor
Cross Site Scripting (XSS) vulnerability in Teradek Brik firmware version 7.2.x and earlier allows remote attackers to run arbitrary code vi
MediumCVSS 5.4No exploitEPSS 0%teradek · brik firmwareFeb 3, 2023
- CVE-2021-3737421Monitor
Cross Site Scripting (XSS) vulnerability in Teradek Clip all firmware versions allows remote attackers to run arbitrary code via the Friendl
MediumCVSS 5.4No exploitEPSS 0%teradek · clip firmwareFeb 3, 2023
- CVE-2021-3737321Monitor
Cross Site Scripting (XSS) vulnerability in Teradek Slice 1st generation firmware 7.3.x and earlier allows remote attackers to run arbitrary
MediumCVSS 5.4No exploitEPSS 0%teradek · slice firmwareFeb 3, 2023
- CVE-2021-3737521Monitor
Cross Site Scripting (XSS) vulnerability in Teradek VidiU / VidiU Mini firmware version 3.0.8 and earlier allows remote attackers to run arb
MediumCVSS 5.4No exploitEPSS 0%teradek · vidiu mini firmwareFeb 3, 2023
- CVE-2018-2515520Monitor
Teradek Slice 7.3.15 Cross-Site Request Forgery via Password Change
MediumCVSS 5.1No exploitEPSS 0%teradek · slice firmwareDec 24, 2025
- CVE-2018-2515620Monitor
Teradek Cube 7.3.6 Cross-Site Request Forgery Password Change
MediumCVSS 5.1No exploitEPSS 0%teradek · cube firmwareDec 24, 2025
- CVE-2019-2525220Monitor
Teradek VidiU Pro 3.0.3 Cross-Site Request Forgery via Password Change
MediumCVSS 5.1No exploitEPSS 0%teradek · vidiu pro firmwareDec 24, 2025