CVE-2026-49435
Keysight IxChariot-related products stack-based buffer overflow
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 6.0.7, 10.0.254, 3.13.0, 3.13.0.69
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
CISA's decision points: whether it is exploited, whether attacks can be automated, and how much control an attacker gets. Assessed (SSVC 2.0.3).What do these mean? →
- Exploitation: none
- Automatable: no
- Technical impact: total
Summary
Keysight IxChariot Endpoint and associated products contain a stack-based buffer overflow. An unauthenticated remote attacker can send a specially crafted packet and execute arbitrary code with administrative privileges.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: total
- Record last updated
Affected versions
- Keysight Hawkeye
fixed in 6.0.7
- Keysight IxChariot
fixed in 10.0.254
- Keysight IxTap
fixed in 3.13.0
- Keysight IxProbe
fixed in 3.13.0
- Keysight IxByPass
fixed in 3.13.0.69
References 7
keysight.com
- us/en/lib/software-detail/computer-software/hawkeye.html
- us/en/about/quality-and-security/security/product-and-solution-cyber-security/security-advisory-archive/security-advisory--ixchariot-vulnerability.html
- us/en/lib/software-detail/computer-software/ixchariot.html
- us/en/lib/software-detail/instrument-firmware-software/ixprobe.html
- us/en/product/IXTP-CU3-T/copper-taps---ixtp-cu3-t.html