CVE-2023-38379 - Vulnerability Details - OpenCVE

The web interface on the RIGOL MSO5000 digital oscilloscope with firmware 00.01.03.00.03 allows remote attackers to change the admin password via a zero-length pass0 to the webcontrol changepwd.cgi application, i.e., the entered password only needs to match the first zero characters of the saved password.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact High

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00066.

Exploitation poc

Automatable yes

Technical Impact partial

Vendors	Products
Rigol	Mso5000 Mso5000 Firmware

Configuration 1 [-]

AND

cpe:2.3:o:rigol:mso5000_firmware:00.01.03.00.03:*:*:*:*:*:*:*

cpe:2.3:h:rigol:mso5000:-:*:*:*:*:*:*:*

No data.

No data.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
https://news.ycombinator.com/item?id=36745664
https://tortel.li/post/insecure-scope/

History

Wed, 30 Oct 2024 18:15:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-306
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2023-07-16T00:00:00

Updated: 2024-10-30T18:10:54.587Z

Reserved: 2023-07-16T00:00:00

Link: CVE-2023-38379

Vulnrichment

Updated: 2024-08-02T17:39:12.817Z

NVD

Status : Modified

Published: 2023-07-16T17:15:09.337

Modified: 2024-11-21T08:13:26.590

Link: CVE-2023-38379

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2023-38379", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "dateUpdated": "2024-10-30T18:10:54.587Z", "dateReserved": "2023-07-16T00:00:00", "datePublished": "2023-07-16T00:00:00"}, "containers": {"cna": {"providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2023-07-16T00:00:00"}, "descriptions": [{"lang": "en", "value": "The web interface on the RIGOL MSO5000 digital oscilloscope with firmware 00.01.03.00.03 allows remote attackers to change the admin password via a zero-length pass0 to the webcontrol changepwd.cgi application, i.e., the entered password only needs to match the first zero characters of the saved password."}], "affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"version": "n/a", "status": "affected"}]}], "references": [{"url": "https://tortel.li/post/insecure-scope/"}, {"url": "https://news.ycombinator.com/item?id=36745664"}], "problemTypes": [{"descriptions": [{"type": "text", "lang": "en", "description": "n/a"}]}]}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T17:39:12.817Z"}, "title": "CVE Program Container", "references": [{"url": "https://tortel.li/post/insecure-scope/", "tags": ["x_transferred"]}, {"url": "https://news.ycombinator.com/item?id=36745664", "tags": ["x_transferred"]}]}, {"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-306", "lang": "en", "description": "CWE-306 Missing Authentication for Critical Function"}]}], "affected": [{"vendor": "rigol", "product": "mso5000", "cpes": ["cpe:2.3:h:rigol:mso5000:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "00.01.03.00.03", "status": "affected"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-10-30T18:09:10.599733Z", "id": "CVE-2023-38379", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-30T18:10:54.587Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://tortel.li/post/insecure-scope/", "tags": ["x_transferred"]}, {"url": "https://news.ycombinator.com/item?id=36745664", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T17:39:12.817Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-38379", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-10-30T18:09:10.599733Z"}}}], "affected": [{"cpes": ["cpe:2.3:h:rigol:mso5000:-:*:*:*:*:*:*:*"], "vendor": "rigol", "product": "mso5000", "versions": [{"status": "affected", "version": "00.01.03.00.03"}], "defaultStatus": "unknown"}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-306", "description": "CWE-306 Missing Authentication for Critical Function"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-30T18:09:38.847Z"}}], "cna": {"affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "references": [{"url": "https://tortel.li/post/insecure-scope/"}, {"url": "https://news.ycombinator.com/item?id=36745664"}], "descriptions": [{"lang": "en", "value": "The web interface on the RIGOL MSO5000 digital oscilloscope with firmware 00.01.03.00.03 allows remote attackers to change the admin password via a zero-length pass0 to the webcontrol changepwd.cgi application, i.e., the entered password only needs to match the first zero characters of the saved password."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "text", "description": "n/a"}]}], "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2023-07-16T00:00:00"}}}, "cveMetadata": {"cveId": "CVE-2023-38379", "state": "PUBLISHED", "dateUpdated": "2024-10-30T18:10:54.587Z", "dateReserved": "2023-07-16T00:00:00", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "datePublished": "2023-07-16T00:00:00", "assignerShortName": "mitre"}, "dataVersion": "5.1"}