Description
Keysight IxChariot Endpoint and associated products contain a stack-based buffer overflow. An unauthenticated remote attacker can send a specially crafted packet and execute arbitrary code with administrative privileges.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Keysight Hawkeye
Default version status: unknown
0 to < 6.0.7affected6.0.7unaffected
Keysight IxChariot
Default version status: unknown
10.0.254unaffected0 to < 10.0.254affected
Keysight IxTap
Default version status: unknown
0 to < 3.13.0affected3.13.0unaffected
Keysight IxProbe
Default version status: unknown
0 to < 3.13.0affected3.13.0unaffected
Keysight IxByPass
Default version status: unknown
0 to < 3.13.0.69affected3.13.0.69unaffected
References
- https://www.keysight.com/us/en/lib/software-detail/computer-software/hawkeye.html ↗
- https://www.keysight.com/us/en/about/quality-and-security/security/product-and-solution-cyber-security/security-advisory-archive/security-advisory--ixchariot-vulnerability.html ↗
- https://www.keysight.com/us/en/lib/software-detail/computer-software/ixchariot.html ↗
- https://www.keysight.com/us/en/lib/software-detail/instrument-firmware-software/ixprobe.html ↗
- https://www.keysight.com/us/en/product/IXTP-CU3-T/copper-taps---ixtp-cu3-t.html ↗
- https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2026/va-26-216-01.json ↗
- https://www.cve.org/CVERecord?id=CVE-2026-49435 ↗