CVE-2026-111854
CVE-2026-111854
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. A path traversal vulnerability in the SCPI FILESystem command interface allows remote attackers to read or modify arbitrary files on the device through insufficient validation of file paths supplied to filesystem access commands.
CVSS 8.1 · High · EPSS 0.5% · Fix available
- Published
- Updated
Affected products and versions
3 series mdo
- Versions
- ≥ 0, < 1.21.1: Affected (semver)
Update to 1.21.1