Critical severity9.8NVD Advisory· Published Jul 16, 2023· Updated Jun 17, 2026

CVE-2023-38378

Description

The web interface on the RIGOL MSO5000 digital oscilloscope with firmware 00.01.03.00.03 allows remote attackers to execute arbitrary code via shell metacharacters in pass1 to the webcontrol changepwd.cgi application.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

RIGOL/MSO5000llm-fuzzy
Range: 00.01.03.00.03
RIGOL/MSO5000 digital oscilloscopedescription
RIGOL/Mso5000 Firmware
cpe:2.3:o:rigol:mso5000_firmware:00.01.03.00.03:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

tortel.li/post/insecure-scope/nvdExploitThird Party Advisory
news.ycombinator.com/itemnvdIssue TrackingThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000