Keysight Technologies vulnerabilities
We track 3 vulnerabilities in Keysight Technologies products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on July 19, 2023.
Latest Keysight Technologies vulnerabilities
- 7.8 High severity
N6845A Geolocation Server: Uncontrolled Search Path Element
In Keysight Geolocation Server v2.4.2 and prior, a low privileged attacker could create a local ZIP file containing a malicious script in any location. The attacker could abuse this to load a DLL with SYSTEM privileges.
- 7.8 High severity
N6845A Geolocation Server: Unrestricted Upload of File with Dangerous Type
In Keysight Geolocation Server v2.4.2 and prior, an attacker could upload a specially crafted malicious file or delete any file or directory with SYSTEM privileges due to an improper path validation, which could result in local privilege escalation or a denial
- 9.8 Critical severity
N6854A Geolocation Server: Deserialization of Untrusted Data
N6854A Geolocation Server versions 2.4.2 are vulnerable to untrusted data deserialization, which may allow a malicious actor to escalate privileges in the affected device’s default configuration and achieve remote code execution.