Vulnerabilities > Teradek
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-02-03 | CVE-2021-37373 | Cross-site Scripting vulnerability in Teradek Slice Firmware Cross Site Scripting (XSS) vulnerability in Teradek Slice 1st generation firmware 7.3.x and earlier allows remote attackers to run arbitrary code via the Friendly Name field in System Information Settings. | 5.4 |
| 2023-02-03 | CVE-2021-37374 | Cross-site Scripting vulnerability in Teradek Clip Firmware Cross Site Scripting (XSS) vulnerability in Teradek Clip all firmware versions allows remote attackers to run arbitrary code via the Friendly Name field in System Information Settings. | 5.4 |
| 2023-02-03 | CVE-2021-37375 | Cross-site Scripting vulnerability in Teradek Vidiu Firmware and Vidiu Mini Firmware Cross Site Scripting (XSS) vulnerability in Teradek VidiU / VidiU Mini firmware version 3.0.8 and earlier allows remote attackers to run arbitrary code via the Friendly Name field in System Information Settings. | 5.4 |
| 2023-02-03 | CVE-2021-37376 | Cross-site Scripting vulnerability in Teradek Bond 2 Firmware, Bond Firmware and Bond PRO Firmware Cross Site Scripting (XSS) vulnerability in Teradek Bond, Bond 2 and Bond Pro firmware version 7.3.x and earlier allows remote attackers to run arbitrary code via the Friendly Name field in System Information Settings. | 5.4 |
| 2023-02-03 | CVE-2021-37377 | Cross-site Scripting vulnerability in Teradek Brik Firmware 7.2.1/7.2.2 Cross Site Scripting (XSS) vulnerability in Teradek Brik firmware version 7.2.x and earlier allows remote attackers to run arbitrary code via the Friendly Name field in System Information Settings. | 5.4 |
| 2023-02-03 | CVE-2021-37379 | Cross-site Scripting vulnerability in Teradek Sphere Firmware Cross Site Scripting (XSS) vulnerability in Teradek Sphere all firmware versions allows remote attackers to run arbitrary code via the Friendly Name field in System Information Settings. | 5.4 |