EUVD-2023-42195

Malicious code in bioql PyPI...

CVE-2023-38379

The web interface on the RIGOL MSO5000 digital oscilloscope with firmware 00.01.03.00.03 allows remote attackers to change the admin password via a zero-length pass0 to the webcontrol changepwd.cgi application, i.e., the entered password only needs to match the first zero characters of the saved...

CVE-2023-38378

The web interface on the RIGOL MSO5000 digital oscilloscope with firmware 00.01.03.00.03 allows remote attackers to execute arbitrary code via shell metacharacters in pass1 to the webcontrol changepwd.cgi application...

CVE-2023-38378

The web interface on the RIGOL MSO5000 digital oscilloscope with firmware 00.01.03.00.03 allows remote attackers to execute arbitrary code via shell metacharacters in pass1 to the webcontrol changepwd.cgi application...

CVE-2023-38379

The web interface on the RIGOL MSO5000 digital oscilloscope with firmware 00.01.03.00.03 allows remote attackers to change the admin password via a zero-length pass0 to the webcontrol changepwd.cgi application, i.e., the entered password only needs to match the first zero characters of the saved...

CVE-2023-38379

The web interface on the RIGOL MSO5000 digital oscilloscope with firmware 00.01.03.00.03 allows remote attackers to change the admin password via a zero-length pass0 to the webcontrol changepwd.cgi application, i.e., the entered password only needs to match the first zero characters of the saved...

CVE-2023-38378

The web interface on the RIGOL MSO5000 digital oscilloscope with firmware 00.01.03.00.03 allows remote attackers to execute arbitrary code via shell metacharacters in pass1 to the webcontrol changepwd.cgi application...

Code injection

The web interface on the RIGOL MSO5000 digital oscilloscope with firmware 00.01.03.00.03 allows remote attackers to execute arbitrary code via shell metacharacters in pass1 to the webcontrol changepwd.cgi application...

RIGOL MSO5000 安全漏洞

The RIGOL MSO5000 is an oscilloscope from China's Puyuan Jingdian RIGOL company. A security vulnerability exists in the RIGOL MSO5000 version 00.01.03.00.03, which originates from changing the administrator password via a zero-length pass0 to the Webcontrol Changepwd.cgi application, i.e., the...

CVE-2023-38378

The web interface on the RIGOL MSO5000 digital oscilloscope with firmware 00.01.03.00.03 allows remote attackers to execute arbitrary code via shell metacharacters in pass1 to the webcontrol changepwd.cgi application...

PT-2023-26389 · Rigol · Rigol Mso5000

Name of the Vulnerable Software and Affected Versions: RIGOL MSO5000 digital oscilloscope version 00.01.03.00.03 Description: The issue allows remote attackers to execute arbitrary code via shell metacharacters in pass1 to the "webcontrol changepwd.cgi" application. This is a problem with the web...

PT-2023-26390 · Rigol · Rigol Mso5000

Name of the Vulnerable Software and Affected Versions: RIGOL MSO5000 digital oscilloscope version 00.01.03.00.03 Description: The issue allows remote attackers to change the admin password via a zero-length password to the "webcontrol changepwd.cgi" application. This means the entered password on...

CVE-2023-38379

The CVE concerns RIGOL MSO5000 (firmware 00.01.03.00.03). The web interface’s webcontrol changepwd.cgi allows remote admin password changes because the entered password only must match the first zero characters of the saved password (zero-length password check). Impact is remote admin credential ...

CVE-2023-38378

CVE-2023-38378 concerns the RIGOL MSO5000 digital oscilloscope web interface. Affects firmware 00.01.03.00.03. The issue arises in the webcontrol changepwd.cgi handler, where shell metacharacters in pass1 enable remote arbitrary code execution. The CVSSv3.1 vector provided (AV:N/AC:L/PR:N/UI:N/S:...

RIGOL MSO5000 操作系统命令注入漏洞

The RIGOL MSO5000 is an oscilloscope from China's Puyuan Jingdian RIGOL Company. A security vulnerability exists in the RIGOL MSO5000 version 00.01.03.00.03, which originates from the execution of arbitrary code via the Webcontrol changepwd.cgi application via shell metacharacters in pass1...

CVE-2023-38379

The web interface on the RIGOL MSO5000 digital oscilloscope with firmware 00.01.03.00.03 allows remote attackers to change the admin password via a zero-length pass0 to the webcontrol changepwd.cgi application, i.e., the entered password only needs to match the first zero characters of the saved...