9.8

CVE-2026-49435

Keysight IxChariot-related products stack-based buffer overflow

Keysight IxChariot Endpoint and associated products contain a stack-based buffer overflow. An unauthenticated remote attacker can send a specially crafted packet and execute arbitrary code with administrative privileges.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerKeysight
≫
Produkt Hawkeye
Default Statusunknown
Version 0
Version < 6.0.7
Status affected
Version 6.0.7
Status unaffected
HerstellerKeysight
≫
Produkt IxChariot
Default Statusunknown
Version 10.0.254
Status unaffected
Version 0
Version < 10.0.254
Status affected
HerstellerKeysight
≫
Produkt IxTap
Default Statusunknown
Version 0
Version < 3.13.0
Status affected
Version 3.13.0
Status unaffected
HerstellerKeysight
≫
Produkt IxProbe
Default Statusunknown
Version 0
Version < 3.13.0
Status affected
Version 3.13.0
Status unaffected
HerstellerKeysight
≫
Produkt IxByPass
Default Statusunknown
Version 0
Version < 3.13.0.69
Status affected
Version 3.13.0.69
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.77% 0.523
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
cisa-cg 9.3 0 0
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
cisa-cg 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-121 Stack-based Buffer Overflow

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

https://www.keysight.com/us/en/about/quality-and-security/security/product-and-solution-cyber-security/security-advisory-archive/security-advisory--ixchariot-vulnerability.html
https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2026/va-26-216-01.json
https://www.keysight.com/us/en/lib/software-detail/computer-software/hawkeye.html
https://www.keysight.com/us/en/lib/software-detail/computer-software/ixchariot.html
https://www.keysight.com/us/en/lib/software-detail/instrument-firmware-software/ixprobe.html
https://www.keysight.com/us/en/product/IXTP-CU3-T/copper-taps---ixtp-cu3-t.html
https://www.cve.org/CVERecord?id=CVE-2026-49435