CVE-2022-1661: Keysight N6854A Geolocation server and N6841A RF Sensor software
Published May 31, 2022
·Updated
The affected products are vulnerable to directory traversal, which may allow an attacker to obtain arbitrary operating system files.
Affected Software
5 affected components
Keysight Technologies, Inc. Keysight N6854A and N6841A RF: Version 2.3.0 and earlier
keysight N6854a Firmware<2.4.0
keysight N6854A
keysight N6841a Rf Firmware<2.4.0
keysight N6841A RF
Remediation
Information
Keysight recommends users update N6854A and N6841A RF to v2.4.0 or later.
Keysight also recommends users take the following actions to help reduce risk:
Block incoming connection on TCP port number defined by environment variable KEYSIGHT_SMS_PORT (default: 8080)
Event History
May 31, 2022
CVE Published
via MITRE·07:36 PM
Data Sourced
via MITRE·07:36 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2022-1661?
CVE-2022-1661 is classified as a high-severity vulnerability due to its potential for directory traversal allowing access to sensitive files.
2
How do I fix CVE-2022-1661?
To mitigate CVE-2022-1661, upgrade to Keysight N6854A and N6841A RF versions 2.4.0 or later.
3
What products are affected by CVE-2022-1661?
CVE-2022-1661 affects Keysight N6854A and N6841A RF versions 2.3.0 and earlier.
4
What types of attacks can exploit CVE-2022-1661?
An attacker can exploit CVE-2022-1661 to perform directory traversal attacks, potentially accessing arbitrary operating system files.
5
Is CVE-2022-1661 currently being exploited in the wild?
As of the latest advisory, there are no confirmed reports of active exploitation of CVE-2022-1661.