CVE-2025-24521CWE-611

Keysight Ixia Vision Product Family Improper Restriction of XML External Entity Reference

Medium · published March 5, 2025

CVSS v4.0
6.9
EPSS
0%
Percentile
36.1
In the wild
Unconfirmed
What it is

External XML entity injection allows arbitrary download of files. The

score without least privilege principle violation is as calculated

below. In combination with other issues it may facilitate further

compromise of the device. Remediation in Version 6.8.0, release date:

01-Mar-25.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00428 · 36.1th percentile
Weakness
CWE-611 · Improper Restriction of XML External Entity Reference
Published
2025-03-05T15:17Z
EPSS history
Timeline
  • 05 MAR 15:17Z
    Keysight Ixia Vision Product Family Improper Restriction of XML External Entity Reference
    cvelistv5