CVE-2025-23416

Path traversal may lead to arbitrary file deletion. The score without least privilege principle violation is as calculated below. In combination with other issues it may facilitate further compromise of the device. Remediation in Version 6.8.0, release date: 01-Mar-25.

• CWE-22

• https://support.ixiacom.com/
• https://support.ixiacom.com/support-overview/product-support/downloads-updates
• https://www.cisa.gov/news-events/ics-advisories/icsa-25-063-02
• https://www.keysight.com/us/en/contact.html

Published

Mar 5, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-23410When uploading organism or sequence data via the web interfa…9.8
• CVE-2025-23411mySCADA myPRO Manager is vulnerable to cross-site request f…6.5
• CVE-2025-23412When BIG-IP APM Access Profile is configured on a virtual se…8.7
• CVE-2025-23413When users log in through the webUI or API using local authe…6.7
• CVE-2025-23414in OpenHarmony v5.0.2 and prior versions allow a local attac…7.8
• CVE-2025-23415An insufficient verification of data authenticity vulnerabil…3.1
• CVE-2025-23417A denial of service vulnerability exists in the Modbus RTU o…7.5
• CVE-2025-23418in OpenHarmony v5.0.2 and prior versions allow a local attac…5.5
• CVE-2025-23419When multiple server blocks are configured to share the same…5.3
• CVE-2025-2342A vulnerability classified as critical has been found in IRO…6.9
• CVE-2025-23420in OpenHarmony v5.0.2 and prior versions allow a local attac…7.8
• CVE-2025-23421An attacker could obtain firmware files and reverse engineer…6.9