CRITICAL🇵🇱 Wersja polska

CVE-2023-25367

CVSS 9.8v3.1pub. 2023-06-14upd. 2025-01-03

Siglent SDS 1104X-E SDS1xx4X-E_V6.1.37R9.ADS allows unfiltered user input resulting in Remote Code Execution (RCE) with SCPI interface or web server.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Siglent Sds1074x E

    HW
    Siglent
    wszystkie wersje

  • Siglent Sds1074x E Firmware

    OS
    Siglent
    6.1.37r9.ads

  • Siglent Sds1104x E

    HW
    Siglent
    wszystkie wersje

  • Siglent Sds1104x E Firmware

    OS
    Siglent
    6.1.37r9.ads

  • Siglent Sds1204x E

    HW
    Siglent
    wszystkie wersje

  • Siglent Sds1204x E Firmware

    OS
    Siglent
    6.1.37r9.ads
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCE
CWE
References

Related vulnerabilities

CVE-2023-25368HIGH7.5ten sam produkt

Siglent SDS 1104X-E SDS1xx4X-E_V6.1.37R9.ADS is vulnerable to Incorrect Access Control. An unauthenticated att...

CVE-2023-25369HIGH7.5ten sam produkt

Siglent SDS 1104X-E SDS1xx4X-E_V6.1.37R9.ADS is vulnerable to Denial of Service on the user interface triggere...

CVE-2023-25366CRITICAL9.8ten sam vendor

In Siglent SDS 1104X-E SDS1xx4X-E_V6.1.37R9.ADS, insecure SCPI interface discloses web password.