PT-2023-17379 · Keysight · Keysight N8844A Data Analytics Web Service
CVE-2023-1967
·
Publicado
2023-04-27
·
Atualizado
2025-01-16
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Keysight N8844A Data Analytics Web Service (affected versions not specified)
Description
The issue concerns the deserialization of untrusted data without sufficient verification, which can lead to remote code execution. This problem arises because the Keysight N8844A Data Analytics Web Service does not properly validate the data it deserializes, potentially allowing an attacker to execute malicious code.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Deserialization of Untrusted Data
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Keysight N8844A Data Analytics Web Service