Vulnerabilities

TI-2023-10725 CVE-2023-25366 · GHSA-2wh8-mpmc-rwwm

In Siglent SDS 1104X-E SDS1xx4X-E_V6.1.37R9.ADS, insecure SCPI interface discloses web password.

HIGH 82

In Siglent SDS 1104X-E SDS1xx4X-E_V6.1.37R9.ADS, insecure SCPI interface discloses web password.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00408 Published 2023-06-16 No fix listed CWE-346

TI-2023-10728 CVE-2023-25369 · GHSA-jpvm-qrgg-5cj2

HIGH 66

Siglent SDS 1104X-E SDS1xx4X-E_V6.1.37R9.ADS is vulnerable to Denial of Service on the user interface triggered by malformed SCPI command.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00845 Published 2023-06-14 No fix listed

TI-2023-10727 CVE-2023-25368 · GHSA-2x47-9c6f-c7hj

HIGH 66

Siglent SDS 1104X-E SDS1xx4X-E_V6.1.37R9.ADS is vulnerable to Incorrect Access Control.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00836 Published 2023-06-14 No fix listed

TI-2023-10726 CVE-2023-25367 · GHSA-jr44-r845-43f9

HIGH 76

Siglent SDS 1104X-E SDS1xx4X-E_V6.1.37R9.ADS allows unfiltered user input resulting in Remote Code Execution (RCE) with SCPI interface or web server.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0172 Published 2023-06-14 No fix listed