CVE-2026-111853

8.8High

Published 17 Oct 2026 · NVD status: Received · AI triage by gemini-3.8-flash

8.8High

Attack vector: Network
Complexity: Low
Privileges needed: Low
User interaction: None
Impact: Full C/I/A compromise
Weakness: CWE-78

Impact

Authenticated remote attackers can execute arbitrary OS commands with elevated privileges on the device. They need network access to the instrument's SCPI interface and valid low-privilege credentials.

Root cause

The FILESystem:MOUNT:DRIve SCPI command handler fails to sanitize user-supplied input, leading to OS command injection.

Affected systems

Tektronix 3 Series MDO devices before 1.21.1

CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Fix & remediation

Upgrade device firmware to version 1.21.1 or later. If patching immediately is not possible, restrict network access to the SCPI service port using firewall rules or place the oscilloscope on an isolated management VLAN.

AI-suggested. Run it in staging first and check it against the vendor advisory. Why?

Ad · In-content banner

NVD description

An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. An OS command injection vulnerability exists in the FILESystem:MOUNT:DRIve SCPI command handler. Insufficient neutralization of user-supplied input allows remote attackers to execute arbitrary operating system commands with elevated privileges.

References

Source: nvd.nist.gov/vuln/detail/CVE-2026-111853