Keysight N6854A Geolocation server and N6841A RF Sensor software

🗓️ 26 May 2022 00:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 46 Views

Keysight N6854A Geolocation server and N6841A RF Sensor software affected by relative path traversal and deserialization of untrusted data. Exploitation could allow an attacker to obtain arbitrary OS files and execute arbitrary code. Mitigations involve updating the software and implementing network and access control measures

Reporter	Title	Published	Views	Family All 24
BDU FSTEC	The vulnerability of the Spring Framework configuration implementation for microprogramming sensors for monitoring the Keysight N6841A RF device and the Keysight N6854A geolocation sensors allows a perpetrator to execute arbitrary code.	21 Jul 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the implementation of the UserFirmwareRequestHandler class in the microprogramming software for sensors for monitoring the Keysight N6841A, as well as the microprogramming software for geolocation servers from Keysight, N6854A, allows a perpetrator to gain unauthorized access to protected information.	1 Aug 202200:00	–	bdu_fstec
CNNVD	多款Keysight Technologies产品代码问题漏洞	27 May 202200:00	–	cnnvd
CNNVD	多款Keysight Technologies产品路径遍历漏洞	27 May 202200:00	–	cnnvd
Check Point Advisories	KeySight N6854A and N6841A RF Sensor Directory Traversal (CVE-2022-1661)	20 Oct 202200:00	–	checkpoint_advisories
Check Point Advisories	KeySight N6854A and N6841A RF Sensor Insecure Deserialization (CVE-2022-1660)	20 Oct 202200:00	–	checkpoint_advisories
CVE	CVE-2022-1660	31 May 202219:34	–	cve
CVE	CVE-2022-1661	31 May 202219:36	–	cve
Cvelist	CVE-2022-1660 Keysight N6854A Geolocation server and N6841A RF Sensor software	31 May 202219:34	–	cvelist
Cvelist	CVE-2022-1661 Keysight N6854A Geolocation server and N6841A RF Sensor software	31 May 202219:36	–	cvelist

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2022/icsa-22-146-01.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-22-146-01
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B

26 May 2022 00:00Current

9.7High risk

Vulners AI Score9.7

CVSS 3.19.8

CVSS 210

EPSS0.01035

SSVC