CyberSecBulletin

Rigol vulnerabilities

We track 2 vulnerabilities in Rigol products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 16, 2023.

2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score

Latest Rigol vulnerabilities

  • 7.5 High severity

    mso5000: Missing Authentication for Critical Functionality

    CVE-2023-38379Rigol

    The web interface on the RIGOL MSO5000 digital oscilloscope with firmware 00.01.03.00.03 allows remote attackers to change the admin password via a zero-length pass0 to the webcontrol changepwd.cgi application, i.e., the entered password only needs to match th

  • 9.8 Critical severity

    mso5000: Improper Neutralization of Special Elements used in an OS Command

    CVE-2023-38378RigolEPSS 1.47%

    The web interface on the RIGOL MSO5000 digital oscilloscope with firmware 00.01.03.00.03 allows remote attackers to execute arbitrary code via shell metacharacters in pass1 to the webcontrol changepwd.cgi application.