A critical stack-based buffer overflow in Keysight IxChariot enables unauthenticated remote code execution, creating a high-risk security exposure for network infrastructure.

The vulnerability is a stack-based buffer overflow (CWE-121) occurring during the handling of network packets. An unauthenticated remote attacker can send malicious packets to the endpoint to trigger the overflow and potentially execute arbitrary code with the privileges of the service.

The ability for an unauthenticated attacker to execute code remotely presents a significant threat to organizational security. With a CVSS score of 9.8, this vulnerability could be leveraged to gain persistence within a network, facilitate lateral movement, or cause catastrophic service failure, leading to major business disruption.

Immediate Action: Upgrade Keysight IxChariot installations to version 9.5.102 or higher to remediate the buffer overflow flaw.

Proactive Monitoring: Monitor system and application logs for unexpected crashes or service restarts that may indicate attempted exploitation.

Compensating Controls: Restrict network access to the affected IxChariot services using firewalls or Access Control Lists to ensure only trusted segments can reach the application.

Public Exploit Available: No

Organizations must treat this vulnerability as high priority and apply the vendor-supplied update immediately. Failure to patch these endpoints leaves the network susceptible to remote compromise by unauthenticated actors.