← voltar
CVE-2025-24521

Keysight Ixia Vision Product Family Improper Restriction of XML External Entity Reference

CVSS 6.9 MEDIUMEPSS 0.4%CWE-611
External XML entity injection allows arbitrary download of files. The score without least privilege principle violation is as calculated below. In combination with other issues it may facilitate further compromise of the device. Remediation in Version 6.8.0, release date: 01-Mar-25.
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Produtos afetados
Keysight · Ixia Vision Product Family

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
https://support.ixiacom.com/https://support.ixiacom.com/support-overview/product-support/downloads-updateshttps://www.cisa.gov/news-events/ics-advisories/icsa-25-063-02https://www.keysight.com/us/en/contact.html