Vulnerability · Published Sep 30, 2025 · Assigned by icscert
CVE-2025-24525Keysight Ixia Vision Product Family Use of Hard-coded Cryptographic Key
High 7.5
In plain English
A high-severity security flaw in Ixia Vision Product Family from Keysight. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 18% of all known vulnerabilities).
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.3%top 82.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Keysight Ixia Vision has an issue with hardcoded cryptographic material which may allow an attacker to intercept or decrypt payloads sent to the device via API calls or user authentication if the end user does not replace the TLS certificate that shipped with the device. Remediation is available in Version 6.9.1, released on September 23, 2025.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Keysight | Ixia Vision Product Family | 6.3.1 |
Weakness: CWE-321 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N