VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Dec 24, 2025· Updated Jun 17, 2026

CVE-2019-25251

CVE-2019-25251

Description

Teradek VidiU Pro 3.0.3 contains a server-side request forgery vulnerability in the management interface that allows attackers to manipulate GET parameters 'url' and 'xml_url'. Attackers can exploit this flaw to bypass firewalls, initiate network enumeration, and potentially trigger external HTTP requests to arbitrary destinations.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

11
  • Teradek, Llc/Vidiu Prov52 versions
    3.0.3r32136+ 1 more
    • (no CPE)range: 3.0.3r32136
    • (no CPE)range: = 3.0.3
  • Teradek, Llc/Vidiu Pro Firmware3 versions
    cpe:2.3:o:teradek:vidiu_pro_firmware:2.4.10:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:teradek:vidiu_pro_firmware:2.4.10:*:*:*:*:*:*:*
    • cpe:2.3:o:teradek:vidiu_pro_firmware:3.0.2:build31225:*:*:*:*:*:*
    • cpe:2.3:o:teradek:vidiu_pro_firmware:3.0.3:build32136:*:*:*:*:*:*
  • Teradek, Llc/Vidiu Firmware3 versions
    cpe:2.3:o:teradek:vidiu_firmware:2.4.10:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:teradek:vidiu_firmware:2.4.10:*:*:*:*:*:*:*
    • cpe:2.3:o:teradek:vidiu_firmware:3.0.2:build31225:*:*:*:*:*:*
    • cpe:2.3:o:teradek:vidiu_firmware:3.0.3:build32136:*:*:*:*:*:*
  • Teradek, Llc/Vidiu Mini Firmware3 versions
    cpe:2.3:o:teradek:vidiu_mini_firmware:2.4.10:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:teradek:vidiu_mini_firmware:2.4.10:*:*:*:*:*:*:*
    • cpe:2.3:o:teradek:vidiu_mini_firmware:3.0.2:build31225:*:*:*:*:*:*
    • cpe:2.3:o:teradek:vidiu_mini_firmware:3.0.3:build32136:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.