PT-2025-53337 · Teradek · Teradek Vidiu Pro

Published 2025-12-24 · Updated 2025-12-24 · CVE-2019-25251

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Teradek VidiU Pro version 3.0.3

Description The software contains a server-side request forgery issue in the management interface. Attackers can manipulate GET parameters url and xml url to bypass firewalls, perform network enumeration, and potentially initiate HTTP requests to arbitrary destinations.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2019-25251

Affected Products

Teradek Vidiu Pro

References · 6

• 🔥 https://exploit-db.com/exploits/44672 · Exploit
• 🔥 https://zeroscience.mk/en/vulnerabilities/ZSL-2018-5461.php · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-25251 · Security Note
• https://osv.dev/vulnerability/CVE-2019-25251 · Vendor Advisory
• https://t.me/CVEtracker/40628 · Telegram Post
• https://teradek.com · Note