Read the docs
TI-2026-76074 Aliases CVE-2026-111853GHSA-r8hj-gr47-x24w

OS command injection in Tektronix 3 Series MDO SCPI command handler

Priority MEDIUM 42CWE-78Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-78.

Summary

Tektronix 3 Series MDO devices before 1.21.1 are affected. An OS command injection flaw (CWE-78) in the FILESystem:MOUNT:DRIve SCPI command handler occurs because user-supplied input is not neutralized. A remote attacker with low privileges can execute arbitrary operating system commands with elevated privileges, without user interaction.

Written with Claude Haiku 5.5 from the sources below · 2026-10-28

Description from the CNA

An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. An OS command injection vulnerability exists in the FILESystem:MOUNT:DRIve SCPI command handler. Insufficient neutralization of user-supplied input allows remote attackers to execute arbitrary operating system commands with elevated privileges.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01034 64th percentileScored 2026-11-07
Fix Fixed 3 Series MDO (Tektronix): 1.21.1

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Tektronix3 Series MDObefore 1.21.11.21.1Patch availableCNA
  • 3 Series MDO VendorTektronix Affected before 1.21.1 Fixed in 1.21.1 Patch available CNA

Remediation

Upgrade Tektronix 3 Series MDO devices to version 1.21.1, which is the fixed version.

Written with Claude Haiku 5.5 from the sources below · 2026-10-28

  • Fix · CNA 3 Series MDO (Tektronix) Fixed in 1.21.1

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    Tektronix 3 Series MDO 1.21.1

    3 records Highest priority Priority MEDIUM 2 MEDIUM, 1 LOW

    Other records, highest priority first

    • TI-2026-76076 Path traversal in Tektronix 3 Series MDO web interface lets attackers read filesPriority MEDIUM 40
    • TI-2026-76075 Path traversal in Tektronix 3 Series MDO SCPI FILESystem commandPriority LOW 38
    Show all 3 records →

Timeline

  1. 2026-10-18 Threatist record created from CVE-2026-111853
  2. 2026-10-18 Alias added: GHSA-r8hj-gr47-x24w
  3. 2026-10-20 CISA SSVC decision points changed

References

Other 2

  • TI-2026-76076 Path traversal in Tektronix 3 Series MDO web interface lets attackers read files CVSS 3.1HIGH 7.5
  • TI-2026-76075 Path traversal in Tektronix 3 Series MDO SCPI FILESystem command CVSS 3.1HIGH 8.1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences