CVE-2022-1660

🗓️ 31 May 2022 19:34:05Reported by icscertType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 89 Views

The products are vulnerable to untrusted data deserialization allowing remote code execution

Reporter	Title	Published	Views	Family All 11
CNNVD	多款Keysight Technologies产品代码问题漏洞	27 May 202200:00	–	cnnvd
Check Point Advisories	KeySight N6854A and N6841A RF Sensor Insecure Deserialization (CVE-2022-1660)	20 Oct 202200:00	–	checkpoint_advisories
Cvelist	CVE-2022-1660 Keysight N6854A Geolocation server and N6841A RF Sensor software	31 May 202219:34	–	cvelist
EUVD	EUVD-2022-24946	3 Oct 202520:07	–	euvd
ICS	Keysight N6854A Geolocation server and N6841A RF Sensor software	26 May 202200:00	–	ics
Tenable Nessus	Keysight Technologies Sensor Management Server Deserialization RCE (CVE-2022-1660)	7 Jul 202200:00	–	nessus
NVD	CVE-2022-1660	2 Jun 202214:15	–	nvd
OSV	CVE-2022-1660	2 Jun 202214:15	–	osv
Prion	Deserialization of untrusted data	2 Jun 202214:15	–	prion
Vulnrichment	CVE-2022-1660 Keysight N6854A Geolocation server and N6841A RF Sensor software	31 May 202219:34	–	vulnrichment

NVD

Vulners

Node

keysight n6854a_firmwareRange<2.4.0

AND

keysight n6854aMatch-

Node

keysight n6841a_rf_firmwareRange<2.4.0

AND

keysight n6841a_rfMatch-

[
  {
    "product": "N6854A Geolocation server and N6841A RF Sensor software",
    "vendor": "Keysight",
    "versions": [
      {
        "lessThan": "2.3.0",
        "status": "affected",
        "version": "all",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
cisa	www.cisa.gov/uscert/ics/advisories/icsa-22-146-01

21 Nov 2024 06:41Current

9.7High risk

Vulners AI Score9.7

CVSS 3.19.8

CVSS 210

EPSS0.01035

SSVC

CWE-502