PT-2025-53338 · Teradek · Teradek Vidiu Pro

Published 2025-12-24 · Updated 2025-12-24 · CVE-2019-25252

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Teradek VidiU Pro version 3.0.3

Description The Teradek VidiU Pro software contains a cross-site request forgery issue. This allows attackers to alter administrative passwords due to insufficient validation of requests. An attacker can create malicious web pages that automatically submit requests to change passwords when an administrator who is logged in visits the page.

Recommendations Apply updates to address the lack of proper request validation in password change operations.

Exploit

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2019-25252

Affected Products

Teradek Vidiu Pro

References · 6

• 🔥 https://zeroscience.mk/en/vulnerabilities/ZSL-2018-5460.php · Exploit
• 🔥 https://exploit-db.com/exploits/44671 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-25252 · Security Note
• https://osv.dev/vulnerability/CVE-2019-25252 · Vendor Advisory
• https://teradek.com · Note
• https://t.me/CVEtracker/40629 · Telegram Post