Skip to content
OpenAdvisories
High ICSA-25-063-02 5 CVEs

Keysight Ixia Vision Product Family (Update A)

Published Mar 4, 2025 · Updated Sep 30, 2025 · Revision 2

Vendor: Keysight Product: Ixia Vision Product Family

Summary

Successful exploitation of these vulnerabilities could allow an attacker to obtain or change data from the device, or remotely execute arbitrary code.

Vulnerabilities 5

  • High 7.5
    CVE-2025-24525

    Keysight Ixia Vision Product Family Use of Hard-coded Cryptographic Key

    Keysight Ixia Vision has an issue with hardcoded cryptographic material which may allow an attacker to intercept or decrypt payloads sent to the device via API calls or user authentication if the end user does not replace the TLS certificate that shipped with…

    Keysight Ixia Vision Product Family
  • High 7.2
    CVE-2025-24494

    Keysight Ixia Vision Product Family Path Traversal

    Path traversal may allow remote code execution using privileged account (requires device admin account, cannot be performed by a regular user). In combination with the 'Upload' functionality this could be used to execute an arbitrary script or possibly an upl…

    Keysight Ixia Vision Product Family
  • Medium 4.9
    CVE-2025-21095

    Keysight Ixia Vision Product Family Path Traversal

    Path traversal may lead to arbitrary file download. The score without least privilege principle violation is as calculated below. In combination with other issues it may facilitate further compromise of the device. Remediation in Version 6.8.0, release date: …

    Keysight Ixia Vision Product Family
  • Medium 4.9
    CVE-2025-23416

    Keysight Ixia Vision Product Family Path Traversal

    Path traversal may lead to arbitrary file deletion. The score without least privilege principle violation is as calculated below. In combination with other issues it may facilitate further compromise of the device. Remediation in Version 6.8.0, release date: …

    Keysight Ixia Vision Product Family
  • Medium 4.9
    CVE-2025-24521

    Keysight Ixia Vision Product Family Improper Restriction of XML External Entity Reference

    External XML entity injection allows arbitrary download of files. The score without least privilege principle violation is as calculated below. In combination with other issues it may facilitate further compromise of the device. Remediation in Version 6.8.0, …

    Keysight Ixia Vision Product Family

Revision history

  1. #2

    Update A - Added CVE-2025-24525.

  2. #1

    Initial Publication

References