N6854a Firmware vulnerabilities

2 known vulnerabilities in N6854a Firmware from Keysight. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  N6854A Geolocation Server: Deserialization of Untrusted Data

  CVE-2023-1399Mar 27, 2023Keysight Technologies

  N6854A Geolocation Server versions 2.4.2 are vulnerable to untrusted data deserialization, which may allow a malicious actor to escalate privileges in the affected device’s default configuration and achieve remote code execution.

• 9.8 Critical severity

  N6854A Geolocation server and N6841A RF Sensor…: Deserialization of Untrusted Data

  CVE-2022-1660Jun 2, 2022KeysightEPSS 16.8%

  The affected products are vulnerable of untrusted data due to deserialization without prior authorization/authentication, which may allow an attacker to remotely execute arbitrary code.