Path Traversal Vulnerability in Ixia's Network Testing Product
CVE-2025-23416

6.9MEDIUM

Key Information:

Vendor

Keysight

Status
Ixia Vision Product Family
Vendor
CVE Published:
5 March 2025

What is CVE-2025-23416?

A path traversal vulnerability exists in Ixia's Network Testing Product that may allow unauthorized access to sensitive files, leading to arbitrary file deletion. This vulnerability may be exploited in conjunction with other security flaws, potentially resulting in further compromises within the affected network environment. Users are encouraged to upgrade to version 6.8.0, released on March 1, 2025, for necessary remediation.

Affected Version(s)

Ixia Vision Product Family 6.3.1

References

https://www.cisa.gov/news-events/ics-advisories/icsa-25-0...
https://www.keysight.com/us/en/contact.html
https://support.ixiacom.com/

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

NATO Cyber Security Centre (NCSC) reported these vulnerabilities to Keysight.
.