Keysight Ixia Vision Product Family Path Traversal Vulnerability Allowing Arbitrary File Download

A path traversal vulnerability has been identified in the Keysight Ixia Vision Product Family, specifically in version 6.3.1. This vulnerability may allow remote code execution by exploiting the path traversal to access restricted directories, potentially leading to the execution of arbitrary scripts or uploaded binaries. Additionally, the vulnerability could be used to delete files arbitrarily. The issue arises from improper limitations on file paths, which could be exploited by users with administrative privileges.

Impact

Exploitation of this vulnerability could result in arbitrary file downloads, with the potential for remote code execution under certain conditions.

Remediation

Users are advised to upgrade to version 6.8.0, which will be released on March 1, 2025. For more information, visit the Keysight Ixia product support page.