Read the docs
TI-2026-76075 Aliases CVE-2026-111854GHSA-wr4m-ffvp-986p

Path traversal in Tektronix 3 Series MDO SCPI FILESystem command

Priority LOW 38CWE-22Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

Tektronix 3 Series MDO devices before 1.21.1 contain a path traversal flaw (CWE-22) in the SCPI FILESystem command interface. The interface does not validate file paths supplied to filesystem access commands, so remote attackers can read or modify arbitrary files on the device. The attack needs only low privileges and no user interaction.

Written with Claude Haiku 5.5 from the sources below · 2026-10-28

Description from the CNA

An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. A path traversal vulnerability in the SCPI FILESystem command interface allows remote attackers to read or modify arbitrary files on the device through insufficient validation of file paths supplied to filesystem access commands.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00476 41st percentileScored 2026-11-07
Fix Fixed 3 Series MDO (Tektronix): 1.21.1

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Tektronix3 Series MDObefore 1.21.11.21.1Patch availableCNA
  • 3 Series MDO VendorTektronix Affected before 1.21.1 Fixed in 1.21.1 Patch available CNA

Remediation

Update Tektronix 3 Series MDO devices to version 1.21.1, which fixes the flaw.

Written with Claude Haiku 5.5 from the sources below · 2026-10-28

  • Fix · CNA 3 Series MDO (Tektronix) Fixed in 1.21.1

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    Tektronix 3 Series MDO 1.21.1

    3 records Highest priority Priority MEDIUM 2 MEDIUM, 1 LOW

    Other records, highest priority first

    • TI-2026-76074 OS command injection in Tektronix 3 Series MDO SCPI command handlerPriority MEDIUM 42
    • TI-2026-76076 Path traversal in Tektronix 3 Series MDO web interface lets attackers read filesPriority MEDIUM 40
    Show all 3 records →

Timeline

  1. 2026-10-18 Threatist record created from CVE-2026-111854
  2. 2026-10-18 Alias added: GHSA-wr4m-ffvp-986p
  3. 2026-10-18 Priority changed: MEDIUM → LOW
  4. 2026-10-20 CISA SSVC decision points changed

References

Other 2

  • TI-2026-76074 OS command injection in Tektronix 3 Series MDO SCPI command handler CVSS 3.1HIGH 8.8
  • TI-2026-76076 Path traversal in Tektronix 3 Series MDO web interface lets attackers read files CVSS 3.1HIGH 7.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences