Riskcovery

CVE-2023-38379

State
Published
Severity
Not scored
Published
Jul 16, 2023
Updated
Oct 30, 2024
Reserved
Jul 16, 2023

Read the record on cve.org

Description

The web interface on the RIGOL MSO5000 digital oscilloscope with firmware 00.01.03.00.03 allows remote attackers to change the admin password via a zero-length pass0 to the webcontrol changepwd.cgi application, i.e., the entered password only needs to match the first zero characters of the saved password.

Scores

The record has no CVSS score.

Weaknesses

  • CWE-306 Missing Authentication for Critical Function

Affected Products

ProductVersions
n/an/a
  • n/aAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.