CVE-2025-24521

Keysight Ixia Vision Product Family Improper Restriction of XML External Entity Reference

CVSS 6.9 MEDIUMEPSS 0.4%CWE-611

External XML entity injection allows arbitrary download of files. The score without least privilege principle violation is as calculated below. In combination with other issues it may facilitate further compromise of the device. Remediation in Version 6.8.0, release date: 01-Mar-25.

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Affected products

Keysight · Ixia Vision Product Family

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://support.ixiacom.com/https://support.ixiacom.com/support-overview/product-support/downloads-updates https://www.cisa.gov/news-events/ics-advisories/icsa-25-063-02 https://www.keysight.com/us/en/contact.html