3 Series Mdo
Monthly
Path traversal in the web management interface of Tektronix 3 Series MDO oscilloscopes running firmware before 1.21.1 lets remote attackers read arbitrary files accessible to the web application by supplying insufficiently validated file paths. The flaw is rated CVSS 3.1 7.5 (AV:N/AC:L/PR:N/UI:N, C:H/I:N/A:N), but unauthenticated exploitation depends on device configuration - deployments that require login to the web interface reduce the practical risk to authenticated users. Impact is limited to confidentiality (file reads, no write or code execution); no public exploit code or confirmed active exploitation was identified at time of analysis, and exposure is bounded by these instruments typically residing on isolated lab networks rather than the internet.
Path traversal in the SCPI FILESystem command interface of Tektronix 3 Series MDO oscilloscopes running firmware before 1.21.1 allows authenticated remote attackers to read or modify arbitrary files on the device. The vulnerability arises from insufficient validation of file paths supplied to filesystem access commands and is rated CVSS 8.1 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N). No public exploit code or confirmed active exploitation (CISA KEV) has been identified at time of analysis, and exposure is typically limited because the SCPI interface is usually confined to lab or test networks rather than the public internet.
OS command injection in the FILESystem:MOUNT:DRIve SCPI command handler of Tektronix 3 Series MDO oscilloscopes running firmware before 1.21.1 allows authenticated, low-privileged attackers who can reach the instrument's remote-control interface to execute arbitrary operating system commands with elevated privileges (CVSS 8.8, CWE-78, PR:L/UI:N). Any 3 Series MDO that exposes its SCPI control interface (LAN/VXI-11 or raw socket) to a lab or engineering network is in scope, and the attack requires no user interaction. No public exploit code and no CISA KEV listing were identified at time of analysis, and no EPSS score was supplied in the available data, so the realistic risk is concentrated on network-exposed instruments rather than mass exploitation.
Path traversal in the web management interface of Tektronix 3 Series MDO oscilloscopes running firmware before 1.21.1 lets remote attackers read arbitrary files accessible to the web application by supplying insufficiently validated file paths. The flaw is rated CVSS 3.1 7.5 (AV:N/AC:L/PR:N/UI:N, C:H/I:N/A:N), but unauthenticated exploitation depends on device configuration - deployments that require login to the web interface reduce the practical risk to authenticated users. Impact is limited to confidentiality (file reads, no write or code execution); no public exploit code or confirmed active exploitation was identified at time of analysis, and exposure is bounded by these instruments typically residing on isolated lab networks rather than the internet.
Path traversal in the SCPI FILESystem command interface of Tektronix 3 Series MDO oscilloscopes running firmware before 1.21.1 allows authenticated remote attackers to read or modify arbitrary files on the device. The vulnerability arises from insufficient validation of file paths supplied to filesystem access commands and is rated CVSS 8.1 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N). No public exploit code or confirmed active exploitation (CISA KEV) has been identified at time of analysis, and exposure is typically limited because the SCPI interface is usually confined to lab or test networks rather than the public internet.
OS command injection in the FILESystem:MOUNT:DRIve SCPI command handler of Tektronix 3 Series MDO oscilloscopes running firmware before 1.21.1 allows authenticated, low-privileged attackers who can reach the instrument's remote-control interface to execute arbitrary operating system commands with elevated privileges (CVSS 8.8, CWE-78, PR:L/UI:N). Any 3 Series MDO that exposes its SCPI control interface (LAN/VXI-11 or raw socket) to a lab or engineering network is in scope, and the attack requires no user interaction. No public exploit code and no CISA KEV listing were identified at time of analysis, and no EPSS score was supplied in the available data, so the realistic risk is concentrated on network-exposed instruments rather than mass exploitation.