Siglent

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Siglent records in CISA KEV

No Siglent vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records

TI-2023-10725 CVE-2023-25366 · GHSA-2wh8-mpmc-rwwm

HIGH 82

In Siglent SDS 1104X-E SDS1xx4X-E_V6.1.37R9.ADS, insecure SCPI interface discloses web password.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00408 Published 2023-06-16 No fix listed CWE-346

TI-2023-10726 CVE-2023-25367 · GHSA-jr44-r845-43f9

HIGH 76

Siglent SDS 1104X-E SDS1xx4X-E_V6.1.37R9.ADS allows unfiltered user input resulting in Remote Code Execution (RCE) with SCPI interface or web server.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0172 Published 2023-06-14 No fix listed

TI-2023-10728 CVE-2023-25369 · GHSA-jpvm-qrgg-5cj2

HIGH 66

Siglent SDS 1104X-E SDS1xx4X-E_V6.1.37R9.ADS is vulnerable to Denial of Service on the user interface triggered by malformed SCPI command.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00845 Published 2023-06-14 No fix listed

TI-2023-10727 CVE-2023-25368 · GHSA-2x47-9c6f-c7hj

HIGH 66

Siglent SDS 1104X-E SDS1xx4X-E_V6.1.37R9.ADS is vulnerable to Incorrect Access Control.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00836 Published 2023-06-14 No fix listed