CVE-2023-1399
HIGHN6854A Geolocation Server <2.4.2 - Privilege Escalation
Title source: llmDescription
N6854A Geolocation Server versions 2.4.2 are vulnerable to untrusted data deserialization, which may allow a malicious actor to escalate privileges in the affected device’s default configuration and achieve remote code execution.
Scores
CVSS v3
7.8
EPSS
0.0070
EPSS Percentile
71.7%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Classification
CWE
CWE-502
Status
published
Affected Products (1)
keysight/n6854a_firmware
< 2.4.2
Timeline
Published
Mar 27, 2023
Tracked Since
Feb 18, 2026