KeySight N8844A Data Analytics Web Service Unmarshal Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of KeySight N8844A Data Analytics Web Service. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Unmarshal function. The issue results from the lack of...

CVE-2023-1967

Keysight N8844A Data Analytics Web Service deserializes untrusted data without sufficiently verifying the resulting data will be valid...

CVE-2023-1967

Keysight N8844A Data Analytics Web Service deserializes untrusted data without sufficiently verifying the resulting data will be valid...

Design/Logic Flaw

Keysight N8844A Data Analytics Web Service deserializes untrusted data without sufficiently verifying the resulting data will be valid...

CVE-2023-1967 CVE-2023-1967

Keysight N8844A Data Analytics Web Service deserializes untrusted data without sufficiently verifying the resulting data will be valid...

CVE-2023-1967 CVE-2023-1967

Keysight N8844A Data Analytics Web Service deserializes untrusted data without sufficiently verifying the resulting data will be valid...

CVE-2023-1967

Keysight N8844A Data Analytics Web Service is affected by CVE-2023-1967 due to deserialization of untrusted data without sufficient validation, which can lead to remote code execution. Affected product group includes N8844A Data Analytics Web Service (version 2.1.7351 and prior) with additional a...

Keysight N8844A Data Analytics Web Service code-related vulnerabilities

Keysight Technologies Keysight N8844A Data Analytics Web Service is a product from Keysight Technologies, Inc. It allows users to import their test data into a data repository server. A security vulnerability exists in Keysight N8844A Data Analytics Web Service version 2.1.7351 and prior versions...

CVE-2023-1967: Deserialization of Untrusted Data

Keysight N8844A Data Analytics Web Service deserializes untrusted data without sufficiently verifying the resulting data will be valid...

CISA Releases Two Industrial Control Systems Advisories

CISA released two Industrial Control Systems ICS advisories on April 25, 2023. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-23-115-01 Keysight N8844A Data Analytics Web Service ICSA-23-115-02 Scada-LTS Third Party...

Keysight N8844A Data Analytics Web Service (Update A)

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION : Exploitable remotely/low attack complexity Vendor : Keysight Equipment : N8844A Data Analytics Web Service Vulnerability: Deserialization of Untrusted Data 2. RISK EVALUATION Successful exploitation of this vulnerability could lead to remote code...

CVE-2023-1860

A vulnerability was found in Keysight IXIA Hawkeye 3.3.16.28. It has been declared as problematic. This vulnerability affects unknown code of the file /licenses. The manipulation of the argument view with the input teste"alert%27c4ng4c3ir0%27 leads to cross site scripting. The attack can be...

Cross site scripting

A vulnerability was found in Keysight IXIA Hawkeye 3.3.16.28. It has been declared as problematic. This vulnerability affects unknown code of the file /licenses. The manipulation of the argument view with the input teste"alert%27c4ng4c3ir0%27 leads to cross site scripting. The attack can be...

CVE-2023-1860 Keysight IXIA Hawkeye licenses cross site scripting

A vulnerability was found in Keysight IXIA Hawkeye 3.3.16.28. It has been declared as problematic. This vulnerability affects unknown code of the file /licenses. The manipulation of the argument view with the input teste"alert%27c4ng4c3ir0%27 leads to cross site scripting. The attack can be...

CVE-2023-1860

CVE-2023-1860 affects Keysight IXIA Hawkeye (version 3.3.16.28). A vulnerability resides in the /licenses file where the view parameter can be manipulated (e.g., view=teste">), triggering cross-site scripting. It is described as exploitable remotely. The practical impact is cross-site scriptin...

Keysight IXIA Hawkeye cross-site scripting vulnerability

Keysight IXIA Hawkeye is an application from Keysight, Inc. Automates network performance checking via wired/wireless/WLAN, network and applications. A cross-site scripting vulnerability exists in Keysight IXIA Hawkeye version 3.3.16.28. An attacker could exploit this vulnerability to perform...

PT-2023-17290 · Keysight · Keysight Ixia Hawkeye

Name of the Vulnerable Software and Affected Versions: Keysight IXIA Hawkeye version 3.3.16.28 Description: A problem has been found in the software. It affects unknown code in the /licenses file. The issue arises when the view argument is manipulated with a specific input, leading to cross-site...

CVE-2023-1860: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Keysight IXIA Hawkeye 3.3.16.28. It has been declared as problematic. This vulnerability affects unknown code of the file /licenses. The manipulation of the argument view with the input teste" leads to cross site scripting. The attack can be initiated remotely...

Keysight N6845A Geolocation Server

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Keysight Technologies Equipment: N6854A Geolocation Sever Vulnerability: Deserialization of Untrusted Data 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to escalate privileges in...

Keysight Technologies N6854A Geolocation Server code issue vulnerability

Keysight Technologies N6854A Geolocation server is a geolocation server from Keysight Technologies. A security vulnerability in the Keysight Technologies N6854A Geolocation server version 2.4.2, which stems from the server's susceptibility to untrusted data deserialization, can be exploited by an...