CVE-2023-38378

n/a / n/a PUBLISHED

Description (CNA)

The web interface on the RIGOL MSO5000 digital oscilloscope with firmware 00.01.03.00.03 allows remote attackers to execute arbitrary code via shell metacharacters in pass1 to the webcontrol changepwd.cgi application.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://tortel.li/post/insecure-scope/
https://news.ycombinator.com/item?id=36745664

ADP enrichment

CVE

No English description supplied.

https://tortel.li/post/insecure-scope/
https://news.ycombinator.com/item?id=36745664

CISA-ADP

No English description supplied.

No references supplied.