CVE-2023-25368

Siglent SDS 1104X-E SDS1xx4X-EV6.1.37R9.ADS is vulnerable to Incorrect Access Control. An unauthenticated attacker can overwrite firmnware...

CVE-2023-25369

Siglent SDS 1104X-E SDS1xx4X-EV6.1.37R9.ADS is vulnerable to Denial of Service on the user interface triggered by malformed SCPI command...

CVE-2023-25367

Siglent SDS 1104X-E SDS1xx4X-EV6.1.37R9.ADS allows unfiltered user input resulting in Remote Code Execution RCE with SCPI interface or web server...

CVE-2023-25368

Siglent SDS 1104X-E SDS1xx4X-EV6.1.37R9.ADS is vulnerable to Incorrect Access Control. An unauthenticated attacker can overwrite firmnware...

CVE-2023-25369

CVE-2023-25369 affects Siglent SDS 1104X-E (SDS1xx4X-E_V6.1.37R9.ADS). The vulnerability is a Denial of Service on the device UI triggered by a malformed SCPI command. Exploitation details are not provided in the supplied documents, and no active exploit is described here. Impact is UI unavailabi...

PT-2023-20039 · Siglent · Siglent Sds 1104X-E

Name of the Vulnerable Software and Affected Versions: Siglent SDS 1104X-E version 6.1.37R9.ADS Description: The issue is related to a Denial of Service DoS that can be triggered on the user interface by a malformed SCPI command. Recommendations: For Siglent SDS 1104X-E version 6.1.37R9.ADS,...

CVE-2023-25369

Siglent SDS 1104X-E SDS1xx4X-EV6.1.37R9.ADS is vulnerable to Denial of Service on the user interface triggered by malformed SCPI command...

Siglent SDS 安全漏洞

Siglent SDS is a series of super fluorescent oscilloscopes from Siglent. A security vulnerability exists in the Siglent SDS 1104X-E SDS1xx4X-EV6.1.37R9.ADS version. An attacker exploiting this vulnerability could remotely execute code...

CVE-2023-25368

CVE-2023-25368 affects Siglent SDS 1104X-E SDS1xx4X-E_V6.1.37R9.ADS. The flaw is an Incorrect Access Control allowing an unauthenticated attacker to overwrite firmware, with network-based, low-complexity access and HIGH integrity impact (I: High, A: None). Exploitation is indicated as possible (p...

The vulnerability of the microprogrammed Ethernet switches Moxa SDS-3008 lies in the insufficient protection of the web page structure, allowing attackers to execute arbitrary JavaScript code.

The vulnerability of the microprogrammed Ethernet switches from Moxa, the SDS-3008 model, is related to insufficient protection of the website structure when processing the Contact Information field in the Switch Information section. Exploiting this vulnerability allows an attacker to execute...

The vulnerability of the configuration of web applications using microprogramming software for Moxa SDS-3008 Ethernet switches allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the configuration of web applications developed with Microprogramming Software for Moxa SDS-3008 Ethernet switches lies in the transmission of data in an open manner. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected informatio...

The vulnerability of the microprogrammed Ethernet switches Moxa SDS-3008 lies in the insufficient protection of the web page structure, allowing attackers to execute arbitrary JavaScript code.

The vulnerability of the microprogrammed Ethernet switch software from Moxa, the SDS-3008 model, is related to insufficient protection of the website structure during the processing of the Switch Location field in the Switch Information section. Exploiting this vulnerability allows an attacker to...

The vulnerability of the web application function of Moxa SDS-3008 microprogrammable Ethernet switches allows a intruder to gain unauthorized access to protected information.

The vulnerability of the web application function of Moxa SDS-3008 Ethernet switch software lies in the insufficient protection of service data when processing URL addresses containing the “/” or “\” character. Exploiting this vulnerability can allow an attacker to gain unauthorized access to...

CVE-2022-41312

A stored cross-site scripting vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can send an HTTP request to trigger this vulnerability.Form fiel...

CVE-2022-41312

A stored cross-site scripting vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can send an HTTP request to trigger this vulnerability.Form fiel...

CVE-2022-41313

A stored cross-site scripting vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can send an HTTP request to trigger this vulnerability.Form fiel...

CVE-2022-41313

A stored cross-site scripting vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can send an HTTP request to trigger this vulnerability.Form fiel...

CVE-2022-40693

A cleartext transmission vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted network sniffing can lead to a disclosure of sensitive information. An attacker can sniff network traffic to trigger this vulnerability...

CVE-2022-41311

A stored cross-site scripting vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can send an HTTP request to trigger this vulnerability.Form fiel...

CVE-2022-40224

A denial of service vulnerability exists in the web server functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted HTTP message header can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability...