CVE-2025-24525CWE-321

Keysight Ixia Vision Product Family Use of Hard-coded Cryptographic Key

High · published September 30, 2025

CVSS v4.0
8.7
EPSS
0%
Percentile
16.5
In the wild
Unconfirmed
What it is

Keysight Ixia Vision has an issue with hardcoded cryptographic material

which may allow an attacker to intercept or decrypt payloads sent to the

device via API calls or user authentication if the end user does not

replace the TLS certificate that shipped with the device. Remediation is

available in Version 6.9.1, released on September 23, 2025.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00258 · 16.5th percentile
Weakness
CWE-321 · Use of Hard-coded Cryptographic Key
Published
2025-09-30T23:04Z
EPSS history
Timeline
  • 30 SEP 23:04Z
    Keysight Ixia Vision Product Family Use of Hard-coded Cryptographic Key
    cvelistv5