PatchSiren

PatchSiren cyber security CVE debrief

CVE-2025-23416 Keysight CVE debrief

CVE-2025-23416 is a path traversal flaw in the Keysight Ixia Vision Product Family that may allow arbitrary file deletion. The advisory notes that the issue was scored without the least-privilege principle violation and that, in combination with other issues, it could help further compromise the device. Keysight states remediation is available in version 6.8.0, and recommends upgrading from older releases as soon as possible.

Vendor
Keysight
Product
Ixia Vision Product Family
CVSS
MEDIUM 4.9
CISA KEV
Not listed in stored evidence
Original CVE published
2025-03-04
Original CVE updated
2025-09-30
Advisory published
2025-03-04
Advisory updated
2025-09-30

Who should care

Administrators and operators of Keysight Ixia Vision Product Family deployments, especially systems identified as version 6.3.1 or other older releases. Industrial control system defenders responsible for patch management, device hardening, and change control should also prioritize this advisory.

Technical summary

The CISA CSAF advisory for CVE-2025-23416 identifies a path traversal condition affecting Keysight Ixia Vision Product Family: 6.3.1. The stated impact is arbitrary deletion of files. The advisory’s CVSS 3.1 vector is AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N, reflecting that exploitation requires high privileges and primarily affects integrity. The vendor recommends upgrading to the latest software, with remediation available in version 6.8.0 released on 2025-03-01.

Defensive priority

Medium: prioritize patching to version 6.8.0 during the next maintenance window, with higher urgency for systems exposed to untrusted users or used in sensitive ICS environments.

Recommended defensive actions

  • Upgrade Keysight Ixia Vision Product Family to version 6.8.0 or later as soon as operationally feasible.
  • Remove or restrict access to older software versions, consistent with the vendor recommendation to discontinue use of older releases.
  • Limit administrative privileges and review who can reach device management functions, since the advisory’s CVSS vector requires high privileges.
  • Verify backups and recovery procedures for affected systems so file deletion has a lower operational impact.
  • Monitor vendor and CISA advisory updates for any additional affected versions or related issues.

Evidence notes

This debrief is based on the CISA CSAF source advisory and linked official references. The source identifies the affected product as Keysight Ixia Vision Product Family: 6.3.1, describes the issue as path traversal leading to arbitrary file deletion, and states that remediation is available in version 6.8.0 released on 2025-03-01. The published CVSS 3.1 vector is included in the source advisory.

Sources and references

Verified primary and authoritative sources

  • CVE-2025-23416 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2025-23416

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2025-23416 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2025-23416

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • Source item URL

    Unverified legacy reference

    URL: https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2025/icsa-25-063-02.json

    cisa_csaf

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/news-events/ics-advisories/icsa-25-063-02

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/resources-tools/resources/ics-recommended-practices

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/topics/industrial-control-systems

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/uscert/ncas/tips/ST04-014

    Reference

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.