CVE-2019-25251CWE-918

Teradek VidiU Pro 3.0.3 Server-Side Request Forgery via RTMP Settings

Medium · published December 24, 2025

CVSS v4.0
6.9
EPSS
0%
Percentile
25.5
In the wild
Unconfirmed
What it is

Teradek VidiU Pro 3.0.3 contains a server-side request forgery vulnerability in the management interface that allows attackers to manipulate GET parameters 'url' and 'xml_url'. Attackers can exploit this flaw to bypass firewalls, initiate network enumeration, and potentially trigger external HTTP requests to arbitrary destinations.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:L/SI:L/SA:L
EPSS
0.00333 · 25.5th percentile
Weakness
CWE-918 · Server-Side Request Forgery (SSRF)
Published
2025-12-24T19:28Z
EPSS history
Timeline
  • 24 DEC 19:28Z
    Teradek VidiU Pro 3.0.3 Server-Side Request Forgery via RTMP Settings
    cvelistv5