Cryptographic Vulnerability in Keysight Ixia Vision Device
CVE-2025-24525

8.7HIGH

Key Information:

Vendor

Keysight

Status
Ixia Vision Product Family
Vendor
CVE Published:
30 September 2025

What is CVE-2025-24525?

Keysight Ixia Vision devices have a vulnerability that stems from the use of hardcoded cryptographic material. This flaw allows potential attackers to intercept or decrypt sensitive payloads sent to the device through API calls or user authentication. Users are strongly advised to replace the default TLS certificate that comes with the device to mitigate the risk. Affected users should upgrade to Version 6.9.1 or higher, released on September 23, 2025, to address this security concern.

Affected Version(s)

Ixia Vision Product Family 6.3.1

References

https://www.cisa.gov/news-events/ics-advisories/icsa-25-0...
https://support.ixiacom.com/support-overview/product-supp...
https://support.ixiacom.com/

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

NATO Cyber Security Centre (NCSC) reported these vulnerabilities to Keysight.
.