A critical heap-based buffer overflow in Keysight IxChariot permits unauthenticated remote code execution, posing a severe risk to system integrity and availability.

This vulnerability is a heap-based buffer overflow (CWE-122) triggered by the processing of specially crafted packets. An unauthenticated remote attacker can exploit this flaw to crash the endpoint service or gain arbitrary code execution.

Successful exploitation of this vulnerability could lead to a total compromise of the affected endpoint, resulting in unauthorized data access or complete loss of system control. Given the CVSS score of 9.8, this flaw represents a critical risk that could cause significant operational downtime and jeopardize sensitive network environment security.

Immediate Action: Update all instances of Keysight IxChariot to version 9.5.102 or later to eliminate the vulnerable code path.

Proactive Monitoring: Review network traffic logs for anomalous spikes in packet volume or malformed payload patterns targeting the IxChariot service.

Compensating Controls: Implement network segmentation to restrict access to IxChariot endpoints to authorized management consoles, and utilize a WAF or Intrusion Prevention System to inspect traffic for malformed packets.

Public Exploit Available: No

The severity of this vulnerability necessitates immediate patching. Organizations should prioritize updating all affected IxChariot endpoints to the latest version to prevent potential remote exploitation.