9.8
CVSS 3.1
Няма данни
Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)
Няма потвърждение
Атакува се
Няма данни
Време до експлоатация
Атакува се по мрежата, без особени условия, без вход и без действие от потребителя.
- Експлоатация: няма данни за експлоатация
- Атаката не може да се автоматизира
Описание
Оригинално описание
Keysight IxChariot Endpoint and associated products contain a stack-based buffer overflow. An unauthenticated remote attacker can send a specially crafted packet and execute arbitrary code with administrative privileges.
Засегнати продукти
- Keysight Hawkeye: преди 6.0.7; 6.0.7
- Keysight IxChariot: 10.0.254; преди 10.0.254
- Keysight IxTap: преди 3.13.0; 3.13.0
- Keysight IxProbe: преди 3.13.0; 3.13.0
- Keysight IxByPass: преди 3.13.0.69; 3.13.0.69
Вид слабост
История
- 4 август 2026 Публикувано
Други уязвимости в Keysight Hawkeye
Първоизточници
- https://www.cve.org/CVERecord?id=CVE-2026-49435
- https://nvd.nist.gov/vuln/detail/CVE-2026-49435
- https://www.keysight.com/us/en/lib/software-detail/computer-software/hawkeye.html
- https://www.keysight.com/us/en/about/quality-and-security/security/product-and-solution-cyber-security/security-advisory-archive/security-advisory--ixchariot-vulnerability.html
- https://www.keysight.com/us/en/lib/software-detail/computer-software/ixchariot.html
- https://www.keysight.com/us/en/lib/software-detail/instrument-firmware-software/ixprobe.html
- https://www.keysight.com/us/en/product/IXTP-CU3-T/copper-taps---ixtp-cu3-t.html
- https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2026/va-26-216-01.json
- https://www.cve.org/CVERecord?id=CVE-2026-49435