Authentication bypass in SDS 1202X-E - #VU16230
Published: December 4, 2018
Vulnerability identifier: #VU16230
CSH Severity: Low
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N]
CVE-ID: N/A
CWE-ID: CWE-592
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to bypass authentication on the affected system.
The vulnerability exists due to the software “EasyScopeX” can be used from any computer in the network to configure and interact with the oscilloscope. A remote unauthenticated attacker can bypass authentication and change settings on the oscilloscope.
Affected software
SDS 1202X-E
Remediation
Cybersecurity Help is currently unaware of any official solutions to address the vulnerability.