Keysight Ixia Vision Hardcoded Cryptographic Material Vulnerability Allowing Interception or Decryption of API Payloads

A vulnerability exists in Keysight Ixia Vision due to hardcoded cryptographic material, which may enable an attacker to intercept or decrypt payloads sent to the device via API calls or user authentication. This issue arises if the end user does not replace the default TLS certificate that comes with the device. The vulnerability is present in version 6.3.1 of the Ixia Vision Product Family.

Impact

Exploitation of this vulnerability could allow an attacker to intercept or decrypt sensitive payloads sent to the device, potentially leading to unauthorized access or manipulation of data.

Remediation

Users are advised to upgrade to version 6.9.1, released on September 23, 2025. For more information, visit the Keysight Ixia product support page.