CVE-2019-25251 - Teradek VidiU Pro 3.0.3 Server-Side Request Forgery via RTMP Settings

CVE-2019-25251 - Teradek VidiU Pro 3.0.3 Server-Side Request Forgery via RTMP Settings

CVE ID : CVE-2019-25251 Published : Dec. 24, 2025, 8:15 p.m. | 1 hour, 30 minutes ago Description : Teradek VidiU Pro 3.0.3 contains a server-side request forgery vulnerability in the management interface that allows attackers to manipulate GET parameters 'url' and 'xml_url'. Attackers can exploit this flaw to bypass firewalls, initiate network enumeration, and potentially trigger external HTTP requests to arbitrary destinations. Severity: 6.9 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

Severity
MEDIUM
Published
Dec. 24, 2025
Attack Vector: network

Source: Telegram CVE Monitor