3 Series Mdo
Approved changes feed: RSS · Atom
cpe:2.3:a:tektronix:3_series_mdo:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Tektronix (42fdb57f-59be-570c-a72e-abf4d5319acb) |
|---|---|
| Product | 3 Series Mdo (7211e2ca-58c5-5832-8d23-eb46d8275712) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-111853 |
vulnerable | 2026-11-03 10:16:11.636322 |
Details available
HIGH (8.8)
An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. An OS command injection vulnerability exists in the FILESystem:MOUNT:DRIve SCPI command handler. Insufficient neutralization of user-supplied input allows remote attackers to execute arbitrary operating system commands with elevated privileges.
Published: 2026-10-17T02:08:13.787Z
Updated: 2026-10-19T18:41:55.891Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-111854 |
vulnerable | 2026-11-03 10:16:10.764395 |
Details available
HIGH (8.1)
An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. A path traversal vulnerability in the SCPI FILESystem command interface allows remote attackers to read or modify arbitrary files on the device through insufficient validation of file paths supplied to filesystem access commands.
Published: 2026-10-17T02:08:50.037Z
Updated: 2026-10-19T21:27:31.886Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-111855 |
vulnerable | 2026-11-03 10:16:10.640294 |
Details available
HIGH (7.5)
An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. A path traversal vulnerability exists in the web management interface of the device. Insufficient validation of user-supplied file paths allows remote attackers to read arbitrary files accessible to the application. Depending on configuration, exploitation may be possible without authentication.
Published: 2026-10-17T02:09:21.352Z
Updated: 2026-10-21T21:34:00.446Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.