CVEvulnerability

CVE-2019-25252

5.1 MEDIUM Published 2025-12-24 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2025-12-24
Last modified
2026-06-17
Assigner
[email protected]
CVSS 4.0 ([email protected])
5.1 MEDIUM — CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1 ([email protected])
4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
CVSS 3.1 ([email protected])
4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Weaknesses
CWE-352

Description

Teradek VidiU Pro 3.0.3 contains a cross-site request forgery vulnerability that allows attackers to change administrative passwords without proper request validation. Attackers can craft malicious web pages that automatically submit password change requests to the device when a logged-in administrator visits the page.

Affected configurations

• teradek vidiu pro firmware 2.4.10 • teradek vidiu pro firmware 3.0.2 • teradek vidiu pro firmware 3.0.3 • teradek vidiu firmware 2.4.10 • teradek vidiu firmware 3.0.2 • teradek vidiu firmware 3.0.3 • teradek vidiu mini firmware 2.4.10 • teradek vidiu mini firmware 3.0.2 • teradek vidiu mini firmware 3.0.3

Related

Weakness · CWE (1)

  • CWE-352 Cross-Site Request Forgery weakness

References