CVE-2025-24525: high-severity vulnerability in Keysight Ixia Vision Product Family
Keysight Ixia Vision Product Family Use of Hard-coded Cryptographic Key
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.7epss 0.3%
Keysight Ixia Vision has an issue with hardcoded cryptographic material
which may allow an attacker to intercept or decrypt payloads sent to the
device via API calls or user authentication if the end user does not
replace the TLS certificate that shipped with the device. Remediation is
available in Version 6.9.1, released on September 23, 2025.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Affected products
Keysight · Ixia Vision Product FamilyRelated CVEs — Keysight Ixia Vision Product Family
In the same product, most dangerous first.
CVE-2025-24494HIGHKeysight Ixia Vision Product Family Path TraversalEPSS 1.2%CVE-2025-21095MEDIUMKeysight Ixia Vision Product Family Path TraversalEPSS 0.6%CVE-2025-23416MEDIUMKeysight Ixia Vision Product Family Path TraversalEPSS 0.5%CVE-2025-24521MEDIUMKeysight Ixia Vision Product Family Improper Restriction of XML External Entity ReferenceEPSS 0.4%