An unrestricted file upload in the Siglent SDS1104X-E web interface allowed remote code execution; a writeup of the bug, its disclosure, and the fix.