CVE-2025-24521: falha de média gravidade em Keysight Ixia Vision Product Family
Keysight Ixia Vision Product Family Improper Restriction of XML External Entity Reference
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.9epss 0.4%
External XML entity injection allows arbitrary download of files. The
score without least privilege principle violation is as calculated
below. In combination with other issues it may facilitate further
compromise of the device. Remediation in Version 6.8.0, release date:
01-Mar-25.
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Produtos afetados
Keysight · Ixia Vision Product FamilyCVEs relacionadas — Keysight Ixia Vision Product Family
No mesmo produto, das mais perigosas para as menos.
CVE-2025-24494HIGHKeysight Ixia Vision Product Family Path TraversalEPSS 1.2%CVE-2025-21095MEDIUMKeysight Ixia Vision Product Family Path TraversalEPSS 0.6%CVE-2025-23416MEDIUMKeysight Ixia Vision Product Family Path TraversalEPSS 0.5%CVE-2025-24525HIGHKeysight Ixia Vision Product Family Use of Hard-coded Cryptographic KeyEPSS 0.3%