Keysight Ixia Vision Product Family Use of Hard-coded Cryptographic Key
Vulnerability Description
Keysight Ixia Vision has an issue with hardcoded cryptographic material which may allow an attacker to intercept or decrypt payloads sent to the device via API calls or user authentication if the end user does not replace the TLS certificate that shipped with the device. Remediation is available in Version 6.9.1, released on September 23, 2025.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-24525
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- NATO Cyber Security Centre (NCSC) reported these vulnerabilities to Keysight.
References
More from Keysight
View All →Affected Vendor
Keysight
View all reports →