CVE-2018-25155

Medium · 4.3

CVSS

4.3

EPSS

0.2%

Published

Dec 24, 2025

CISA due date

—

The record

Teradek Slice 7.3.15 contains a cross-site request forgery vulnerability that allows attackers to change administrative passwords without proper request validation. Attackers can craft a malicious web page that automatically submits password change requests to the device when a logged-in user visits the page.

Affected packages

Ecosystem	Package	Introduced	Fixed