CVE-2025-24521: fallo de gravedad media en Keysight Ixia Vision Product Family
Keysight Ixia Vision Product Family Improper Restriction of XML External Entity Reference
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 6.9epss 0.4%
External XML entity injection allows arbitrary download of files. The
score without least privilege principle violation is as calculated
below. In combination with other issues it may facilitate further
compromise of the device. Remediation in Version 6.8.0, release date:
01-Mar-25.
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Productos afectados
Keysight · Ixia Vision Product FamilyCVEs relacionadas — Keysight Ixia Vision Product Family
En el mismo producto, de las más peligrosas a las menos.
CVE-2025-24494HIGHKeysight Ixia Vision Product Family Path TraversalEPSS 1.2%CVE-2025-21095MEDIUMKeysight Ixia Vision Product Family Path TraversalEPSS 0.6%CVE-2025-23416MEDIUMKeysight Ixia Vision Product Family Path TraversalEPSS 0.5%CVE-2025-24525HIGHKeysight Ixia Vision Product Family Use of Hard-coded Cryptographic KeyEPSS 0.3%