Path Traversal Vulnerability in Ixia Network Security Product
CVE-2025-24494

8.6HIGH

Key Information:

Vendor

Keysight

Status
Ixia Vision Product Family
Vendor
CVE Published:
5 March 2025

What is CVE-2025-24494?

The vulnerability allows an attacker with a privileged device administrator account to exploit a path traversal flaw. By leveraging the 'Upload' feature, an attacker could execute arbitrary scripts or binaries on the affected network security product. Organizations are advised to upgrade to the latest version, 6.7.0, released on October 20, 2024, to mitigate this risk.

Affected Version(s)

Ixia Vision Product Family 6.3.1

References

https://www.cisa.gov/news-events/ics-advisories/icsa-25-0...
https://www.keysight.com/us/en/contact.html
https://support.ixiacom.com/

CVSS V4

Score:
8.6
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

NATO Cyber Security Centre (NCSC) reported these vulnerabilities to Keysight.
.