Path Traversal Vulnerability in Ixia's Network Testing Solution
CVE-2025-21095

6.9MEDIUM

Key Information:

Vendor

Keysight

Status
Ixia Vision Product Family
Vendor
CVE Published:
5 March 2025

What is CVE-2025-21095?

A vulnerability in Ixia's Network Testing Solution allows for path traversal exploitation, enabling unauthorized access and arbitrary file downloads. If leveraged in conjunction with other vulnerabilities, this issue may lead to a more extensive compromise of the affected systems. Versions prior to 6.8.0 are susceptible, with remediation reflected in the latest release. It's essential for users to update to ensure protection against potential threats associated with this type of vulnerability.

Affected Version(s)

Ixia Vision Product Family 6.3.1

References

https://www.cisa.gov/news-events/ics-advisories/icsa-25-0...
https://www.keysight.com/us/en/contact.html
https://support.ixiacom.com/

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

NATO Cyber Security Centre (NCSC) reported these vulnerabilities to Keysight.
.