VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Dec 24, 2025· Updated Jun 17, 2026

CVE-2019-25252

CVE-2019-25252

Description

Teradek VidiU Pro 3.0.3 contains a cross-site request forgery vulnerability that allows attackers to change administrative passwords without proper request validation. Attackers can craft malicious web pages that automatically submit password change requests to the device when a logged-in administrator visits the page.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

11
  • Teradek, Llc/Vidiu Pro Firmware3 versions
    cpe:2.3:o:teradek:vidiu_pro_firmware:2.4.10:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:teradek:vidiu_pro_firmware:2.4.10:*:*:*:*:*:*:*
    • cpe:2.3:o:teradek:vidiu_pro_firmware:3.0.2:build31225:*:*:*:*:*:*
    • cpe:2.3:o:teradek:vidiu_pro_firmware:3.0.3:build32136:*:*:*:*:*:*
  • Teradek, Llc/Vidiu Firmware3 versions
    cpe:2.3:o:teradek:vidiu_firmware:2.4.10:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:teradek:vidiu_firmware:2.4.10:*:*:*:*:*:*:*
    • cpe:2.3:o:teradek:vidiu_firmware:3.0.2:build31225:*:*:*:*:*:*
    • cpe:2.3:o:teradek:vidiu_firmware:3.0.3:build32136:*:*:*:*:*:*
  • Teradek, Llc/Vidiu Mini Firmware3 versions
    cpe:2.3:o:teradek:vidiu_mini_firmware:2.4.10:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:teradek:vidiu_mini_firmware:2.4.10:*:*:*:*:*:*:*
    • cpe:2.3:o:teradek:vidiu_mini_firmware:3.0.2:build31225:*:*:*:*:*:*
    • cpe:2.3:o:teradek:vidiu_mini_firmware:3.0.3:build32136:*:*:*:*:*:*
  • Teradek, Llc/Vidiu Procpe-rescue2 versions
    3.0.3+ 1 more
    • (no CPE)range: 3.0.3
    • (no CPE)range: = 3.0.3

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.