CVE-2023-1967
CVE-2023-1967

9.8CRITICAL

Key Information:

Vendor

Keysight

Status
N8844a Data Analytics Web Service
Vendor
CVE Published:
27 April 2023

What is CVE-2023-1967?

The Keysight N8844A Data Analytics Web Service contains a deserialization flaw that occurs when the service processes untrusted data without adequate validation. This vulnerability could potentially allow an attacker to exploit the service by sending maliciously crafted data, leading to unauthorized access or modification of the system's behavior. It highlights the critical need for robust input validation and secure coding practices to protect against such exploits.

Affected Version(s)

N8844A Data Analytics Web Service 0 <= 2.1.7351

References

https://www.cisa.gov/news-events/ics-advisories/icsa-23-1...

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.