Lucene search
HistoryJun 14, 2023 - 8:15 p.m.
CVE-2023-25368
siglent sds 1104x-e
v6.1.37r9.ads
incorrect access control
vulnerability
firmware
unauthenticated attacker
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS
0.001
Percentile
36.1%
Siglent SDS 1104X-E SDS1xx4X-E_V6.1.37R9.ADS is vulnerable to Incorrect Access Control. An unauthenticated attacker can overwrite firmnware.
Affected configurations
Node
siglentsds1204x-e_firmwareMatch6.1.37r9.ads
siglentsds1204x-eMatch-
Node
siglentsds1104x-e_firmwareMatch6.1.37r9.ads
siglentsds1104x-eMatch-
Node
siglentsds1074x-e_firmwareMatch6.1.37r9.ads
siglentsds1074x-eMatch-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| siglent | sds1204x-e_firmware | 6.1.37r9.ads | cpe:2.3:o:siglent:sds1204x-e_firmware:6.1.37r9.ads:*:*:*:*:*:*:* |
| siglent | sds1204x-e | - | cpe:2.3:h:siglent:sds1204x-e:-:*:*:*:*:*:*:* |
| siglent | sds1104x-e_firmware | 6.1.37r9.ads | cpe:2.3:o:siglent:sds1104x-e_firmware:6.1.37r9.ads:*:*:*:*:*:*:* |
| siglent | sds1104x-e | - | cpe:2.3:h:siglent:sds1104x-e:-:*:*:*:*:*:*:* |
| siglent | sds1074x-e_firmware | 6.1.37r9.ads | cpe:2.3:o:siglent:sds1074x-e_firmware:6.1.37r9.ads:*:*:*:*:*:*:* |
| siglent | sds1074x-e | - | cpe:2.3:h:siglent:sds1074x-e:-:*:*:*:*:*:*:* |
Related
prion
prion
Improper access control
2023-06-14 20:15:00
cvelist
cvelist
CVE-2023-25368
2023-06-14 00:00:00
cve
cve
CVE-2023-25368
2023-06-14 20:15:09
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS
0.001
Percentile
36.1%
Related for NVD:CVE-2023-25368