CVE-2025-24525— Keysight Ixia Vision Product Family Use of Hard-coded Cryptographic Key
Quick assessment
Affected
Keysight Ixia Vision Product Family
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Keysight Ixia Vision是美国是德科技（Keysight）公司的一系列网络数据包代理。 Keysight Ixia Vision存在安全漏洞，该漏洞源于硬编码加密材料，可能导致拦截或解密有效载荷。
Possible ATT&CK Techniques 1 AI
T1552.004 · Private Keys
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2025-24525
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Keysight Ixia Vision Product Family Use of Hard-coded Cryptographic Key
Source: CVE Program / CVE List V5
Vulnerability Description
Keysight Ixia Vision has an issue with hardcoded cryptographic material
which may allow an attacker to intercept or decrypt payloads sent to the
device via API calls or user authentication if the end user does not
replace the TLS certificate that shipped with the device. Remediation is
available in Version 6.9.1, released on September 23, 2025.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
使用硬编码的密码学密钥
Source: CVE Program / CVE List V5
Vulnerability Title
Keysight Ixia Vision 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Keysight Ixia Vision是美国是德科技（Keysight）公司的一系列网络数据包代理。 Keysight Ixia Vision存在安全漏洞，该漏洞源于硬编码加密材料，可能导致拦截或解密有效载荷。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Keysight | Ixia Vision Product Family | 6.3.1 | - |
|
II. Public POCs for CVE-2025-24525
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-24525
请登录查看更多情报信息。
Vendor Advisories for CVE-2025-24525 (1)
Vendor Pages for CVE-2025-24525 (3)
IV. Related Vulnerabilities
Same product: Ixia Vision Product Family
Same vendor: Keysight
-
CVE-2026-49435
Keysight IxChariot-related products stack-based buffer overf -
CVE-2017-20242
Keysight IxChariot Endpoint stack-based buffer overflow -
CVE-2017-20241
Keysight IxChariot Endpoint heap-based buffer overflow -
CVE-2025-23416
Keysight Ixia Vision Product Family Path Traversal -
CVE-2025-21095
Keysight Ixia Vision Product Family Path Traversal
Same weakness: CWE-321
-
CVE-2026-76258
Use of Hard-coded Cryptographic Key through Companion App Re -
CVE-2026-64887
Airwall - Hardcoded Secrets -
CVE-2026-17468
IBM Documentation Offline is vulnerable to information discl -
CVE-2026-63423
Lenovo Accessories and Display Manager 加密问题漏洞 -
CVE-2026-34635
ColdFusion | Use of Hard-coded Cryptographic Key (CWE-321)
V. Comments for CVE-2025-24525
No comments yet