CVE-2025-24525: falha de alta gravidade em Keysight Ixia Vision Product Family
Keysight Ixia Vision Product Family Use of Hard-coded Cryptographic Key
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.7epss 0.3%
Keysight Ixia Vision has an issue with hardcoded cryptographic material
which may allow an attacker to intercept or decrypt payloads sent to the
device via API calls or user authentication if the end user does not
replace the TLS certificate that shipped with the device. Remediation is
available in Version 6.9.1, released on September 23, 2025.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Produtos afetados
Keysight · Ixia Vision Product FamilyCVEs relacionadas — Keysight Ixia Vision Product Family
No mesmo produto, das mais perigosas para as menos.
CVE-2025-24494HIGHKeysight Ixia Vision Product Family Path TraversalEPSS 1.2%CVE-2025-21095MEDIUMKeysight Ixia Vision Product Family Path TraversalEPSS 0.6%CVE-2025-23416MEDIUMKeysight Ixia Vision Product Family Path TraversalEPSS 0.5%CVE-2025-24521MEDIUMKeysight Ixia Vision Product Family Improper Restriction of XML External Entity ReferenceEPSS 0.4%