mso5000 vulnerabilities

2 known vulnerabilities in mso5000 from Rigol. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  mso5000: Missing Authentication for Critical Functionality

  CVE-2023-38379Jul 16, 2023Rigol

  The web interface on the RIGOL MSO5000 digital oscilloscope with firmware 00.01.03.00.03 allows remote attackers to change the admin password via a zero-length pass0 to the webcontrol changepwd.cgi application, i.e., the entered password only needs to match th

• 9.8 Critical severity

  mso5000: Improper Neutralization of Special Elements used in an OS Command

  CVE-2023-38378Jul 16, 2023RigolEPSS 1.47%

  The web interface on the RIGOL MSO5000 digital oscilloscope with firmware 00.01.03.00.03 allows remote attackers to execute arbitrary code via shell metacharacters in pass1 to the webcontrol changepwd.cgi application.