CVE-2021-37375

Cross Site Scripting XSS vulnerability in Teradek VidiU / VidiU Mini firmware version 3.0.8 and earlier allows remote attackers to run arbitrary code via the Friendly Name field in System Information Settings. NOTE: Vedor states the product has reached End of Life and will not be receiving any...

CVE-2021-37375

Teradek VidiU / VidiU Mini firmware versions 3.0.8 and earlier are affected by a Cross Site Scripting (XSS) vulnerability in the System Information Settings’ Friendly Name field, allowing remote attackers to run arbitrary code. Root cause: unsafely processed input in the Friendly Name parameter l...