Vulnerability Description
Keysight Ixia Vision has an issue with hardcoded cryptographic material which may allow an attacker to intercept or decrypt payloads sent to the device via API calls or user authentication if the end user does not replace the TLS certificate that shipped with the device. Remediation is available in Version 6.9.1, released on September 23, 2025.
CVSS Score
HIGH
Related Weaknesses (CWE)
References
- https://support.ixiacom.com/
- https://support.ixiacom.com/support-overview/product-support/downloads-updates
- https://www.cisa.gov/news-events/ics-advisories/icsa-25-063-02
- https://www.keysight.com/us/en/contact.html
FAQ
What is CVE-2025-24525?
CVE-2025-24525 is a vulnerability with a CVSS score of 7.5 (HIGH). Keysight Ixia Vision has an issue with hardcoded cryptographic material which may allow an attacker to intercept or decrypt payloads sent to the device via API calls or user authentication if the en...
How severe is CVE-2025-24525?
CVE-2025-24525 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-24525?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.