CVE-2023-25368

CVE-2023-25368 affects Siglent SDS 1104X-E SDS1xx4X-E_V6.1.37R9.ADS. The flaw is an Incorrect Access Control allowing an unauthenticated attacker to overwrite firmware, with network-based, low-complexity access and HIGH integrity impact (I: High, A: None). Exploitation is indicated as possible (p...

CVE-2023-25367

CVE-2023-25367 affects Siglent SDS 1104X-E SDS1xx4X-E_V6.1.37R9.ADS. The issue is unfiltered user input allowing Remote Code Execution via the SCPI interface or web server. Root cause: insufficient input validation and, in some sources, lack of authentication on the SCPI interface, enabling remot...

PT-2023-20039 · Siglent · Siglent Sds 1104X-E

Name of the Vulnerable Software and Affected Versions: Siglent SDS 1104X-E version 6.1.37R9.ADS Description: The issue is related to a Denial of Service DoS that can be triggered on the user interface by a malformed SCPI command. Recommendations: For Siglent SDS 1104X-E version 6.1.37R9.ADS,...

CVE-2023-25367

Siglent SDS 1104X-E SDS1xx4X-EV6.1.37R9.ADS allows unfiltered user input resulting in Remote Code Execution RCE with SCPI interface or web server...

CVE-2023-25368

Siglent SDS 1104X-E SDS1xx4X-EV6.1.37R9.ADS is vulnerable to Incorrect Access Control. An unauthenticated attacker can overwrite firmnware...

CVE-2023-25369

Siglent SDS 1104X-E SDS1xx4X-EV6.1.37R9.ADS is vulnerable to Denial of Service on the user interface triggered by malformed SCPI command...

CVE-2023-25368

Siglent SDS 1104X-E SDS1xx4X-EV6.1.37R9.ADS is vulnerable to Incorrect Access Control. An unauthenticated attacker can overwrite firmnware...

Siglent SDS 安全漏洞

Siglent SDS is a series of super fluorescent oscilloscopes from Siglent. A security vulnerability exists in the Siglent SDS 1104X-E SDS1xx4X-EV6.1.37R9.ADS version. An attacker exploiting this vulnerability could remotely execute code...

CVE-2023-25369

CVE-2023-25369 affects Siglent SDS 1104X-E (SDS1xx4X-E_V6.1.37R9.ADS). The vulnerability is a Denial of Service on the device UI triggered by a malformed SCPI command. Exploitation details are not provided in the supplied documents, and no active exploit is described here. Impact is UI unavailabi...

PT-2023-20038 · Siglent · Siglent Sds 1104X-E

Name of the Vulnerable Software and Affected Versions: Siglent SDS 1104X-E SDS1xx4X-E version V6.1.37R9.ADS Description: The issue concerns Incorrect Access Control, allowing an unauthenticated attacker to overwrite firmware. Recommendations: For Siglent SDS 1104X-E SDS1xx4X-E version...

The vulnerability of the web application function of Moxa SDS-3008 microprogrammable Ethernet switches allows a intruder to gain unauthorized access to protected information.

The vulnerability of the web application function of Moxa SDS-3008 Ethernet switch software lies in the insufficient protection of service data when processing URL addresses containing the “/” or “\” character. Exploiting this vulnerability can allow an attacker to gain unauthorized access to...

The vulnerability of the microprogrammed Ethernet switches Moxa SDS-3008 lies in the insufficient protection of the web page structure, allowing attackers to execute arbitrary JavaScript code.

The vulnerability of the microprogrammed Ethernet switches from Moxa, the SDS-3008 model, is related to insufficient protection of the website structure when processing the Contact Information field in the Switch Information section. Exploiting this vulnerability allows an attacker to execute...

The vulnerability of the configuration of web applications using microprogramming software for Moxa SDS-3008 Ethernet switches allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the configuration of web applications developed with Microprogramming Software for Moxa SDS-3008 Ethernet switches lies in the transmission of data in an open manner. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected informatio...

The vulnerability of the microprogrammed Ethernet switches Moxa SDS-3008 lies in the insufficient protection of the web page structure, allowing attackers to execute arbitrary JavaScript code.

The vulnerability of the microprogrammed Ethernet switch software from Moxa, the SDS-3008 model, is related to insufficient protection of the website structure during the processing of the Switch Location field in the Switch Information section. Exploiting this vulnerability allows an attacker to...

CVE-2022-41312

A stored cross-site scripting vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can send an HTTP request to trigger this vulnerability.Form fiel...

CVE-2022-41313

A stored cross-site scripting vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can send an HTTP request to trigger this vulnerability.Form fiel...

CVE-2022-41312

A stored cross-site scripting vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can send an HTTP request to trigger this vulnerability.Form fiel...

CVE-2022-41313

A stored cross-site scripting vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can send an HTTP request to trigger this vulnerability.Form fiel...

CVE-2022-41311

A stored cross-site scripting vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can send an HTTP request to trigger this vulnerability.Form fiel...

CVE-2022-40691

An information disclosure vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted HTTP request can lead to a disclosure of sensitive information. An attacker can send an HTTP request to trigger this vulnerability...