Description
N6854A Geolocation Server versions 2.4.2 are vulnerable to untrusted data deserialization, which may allow a malicious actor to escalate privileges in the affected device’s default configuration and achieve remote code execution.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Keysight Technologies | N6854A Geolocation Server | ≤ 2.4.2 | — |
Advisories 1
- ICSA-23-080-01 Keysight N6845A Geolocation Server CISA ICS & IT advisories · Mar 29, 2023