Threat database

Tektronix 3 Series MDO devices before version 1.21.1 contain a path traversal vulnerability in their web management interface. This flaw allows remote attackers to read arbitrary files accessible to the application by exploiting insufficient validation of user-supplied file paths. Exploitation may be possible without authentication depending on the device configuration. The vulnerability has a high severity rating with a CVSS score of 7.5.

Tektronix 3 Series MDO devices before version 1.21.1 contain a path traversal vulnerability in the SCPI FILESystem command interface. This flaw allows remote attackers with limited privileges to read or modify arbitrary files on the device due to insufficient validation of file paths. The vulnerability has a high severity with a CVSS score of 8.1, impacting confidentiality and integrity but not availability.

Tektronix 3 Series MDO devices before version 1.21.1 contain an OS command injection vulnerability in the FILESystem:MOUNT:DRIve SCPI command handler. This flaw allows remote attackers with limited privileges to execute arbitrary operating system commands with elevated privileges due to insufficient neutralization of user input.