CVE-2023-38378

9.8 criticalEPSS 1.5%

Critical (9.8) in rigol mso5000 firmware. EPSS 1.5% chance of exploitation in the next 30 days.

The web interface on the RIGOL MSO5000 digital oscilloscope with firmware 00.01.03.00.03 allows remote attackers to execute arbitrary code via shell metacharacters in pass1 to the webcontrol changepwd.cgi application.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.5% chance of exploitation in the next 30 days; higher than 73% of CVEs (scores of 2026-10-31)
CWE: CWE-78
Published: 2023-07-16
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

rigol:mso5000_firmware

References

https://news.ycombinator.com/item?id=36745664
https://tortel.li/post/insecure-scope/
https://news.ycombinator.com/item?id=36745664
https://tortel.li/post/insecure-scope/

Check your stack JSON