A critical vulnerability, CVE-2023-1967, has been identified in the Keysight N8844A Data Analytics Web Service, which could potentially lead to remote code execution. This vulnerability is due to the deserialization of untrusted data without proper validation. With a severity rating of 9.8, it poses a significant risk to affected systems. The vulnerability impacts a wide range of systems running Keysight N8844A.

How do I know if I'm affected?

To determine if you're affected by the vulnerability, check if you're using Keysight N8844A Data Analytics Web Service up to version 2.1.7351. This vulnerability impacts a wide range of systems running this software. If you're using one of the affected versions, your system may be at risk. Keep in mind that this vulnerability has a severity rating of 9.8, making it a critical issue to address.

What should I do if I'm affected?

If you're affected by the vulnerability, immediately update your Keysight N8844A Data Analytics Web Service to the latest version. Uninstall older versions and ensure your system is not accessible from the internet. Use firewalls to isolate control system networks and remote devices. When remote access is needed, use secure methods like VPNs.

Is CVE-2023-1967 in CISA’s Known Exploited Vulnerabilities Catalog?

The CVE-2023-1967 vulnerability, found in Keysight N8844A Data Analytics Web Service, is not listed in CISA's Known Exploited Vulnerabilities Catalog. This critical issue, with a severity rating of 9.8, allows untrusted data to be deserialized, potentially leading to remote code execution. It was published on April 27, 2023, but no due date or required action is provided. Users are advised to update their software and follow recommended security practices to minimize risk.

Weakness enumeration

The weakness enumeration for this vulnerability is categorized as CWE-502, which identifies the vulnerability as deserialization of untrusted data that could lead to remote code execution.

For more details

CVE-2023-1967, a critical vulnerability in Keysight N8844A Data Analytics Web Service, poses a significant risk due to its severity rating of 9.8. To gain a comprehensive understanding of this vulnerability, including its description, severity, technical details, and known affected software configurations, consult the NVD page or the link below.

• CISA Advisory on Keysight N8844A Data Analytics Web Service