Skip to content
Fencer Vulns
critical 9.8

CVE-2023-1967 json

CVE-2023-1967

published 2023-04-27 3 y ago modified 2026-06-17 4 mo ago also EUVD-2023-24153

cvss
9.8
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.8%
EPSS 0.8% chance of exploitation in 30 days, percentile 56%
public exploits
0
none known

Summary

Keysight N8844A Data Analytics Web Service deserializes untrusted data without sufficiently verifying the resulting data will be valid.

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-23-115-01 updated cvss 9.8

Keysight N8844A Data Analytics Web Service (Update A)

  • Keysight 5G Test SW Keysight 89600 Vector Signal Analysis SW <June/20/2023 Keysight Arbitrary Waveform Generators Keysight Automotive Compliance Apps <April/17/2023 Keysight AXIe Embedded Controllers <June/2/2023 Keysight BenchVue
    +34 more products
    Keysight BERTs and Compliance Test SW Keysight Boundary Scan Analyzers <April/20/2023 Keysight Component Analysis SW <April/22/2023 Keysight Device Current Waveform Analyzers <April/20/2023 Keysight ENA Network Analyzers <April/5/2023 Keysight EXM Wireless Test <April/20/2023 Keysight In-Circuit Parallel Testers <July/21/2023 Keysight Infiniium Oscilloscopes Keysight InfiniiVision USB and PXIe Oscilloscope SW <April/17/2023 Keysight Logic Analyzers <April/19/2023 Keysight Massively Parallel Board Test Systems Keysight Multi-Band Vector Transceiver Solutions Keysight Multiport ECal SW <April/22/2023 Keysight MXE EMI Test Receivers Keysight N8844A Data Analytics Web Service <=2.1.7351 Keysight Noise Figure Analyzers <March/24/2023 Keysight Open RAN Studio <April/21/2023 Keysight Optical Modulation Analyzers <April/13/2023 Keysight Oscilloscope Compliance Test SW Keysight PathWave Lab Operations for Connectivity <April/7/2023 Keysight PathWave Measurement SW <March/24/2023 Keysight PathWave Test Automation Platform (TAP) Keysight Phase Noise Test System <March/15/2023 Keysight PNA Network Analyzers <May/4/2023 Keysight Precision Source/Measure Units <April/20/2023 Keysight Propsim Channel Emulators <May/5/2023 Keysight PXIe Embedded Controllers <May/12/2023 Keysight PXIe Network Analyzers Keysight PXIe Signal Analyzers and Generators Keysight Radar Target Simulators Keysight Sampling Oscilloscope Compliance Test SW Keysight Signal Generation SW Keysight Signal Source Analyzers <July/7/2023 Keysight USB Network Analyzers <April/22/2023
    affected: mitigation keysight.com

5 more affected in the full advisory

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

CISA SSVC

Exploitation
none
Automatable
yes
Technical impact
total
Assessed
21 mo ago

Exploit prediction

0.80% chance of exploitation in the next 30 days, higher than 56% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CISA ADP 3.1 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD 3.1 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CNA 3.1 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

  • Keysight N8844A Data Analytics Web Service

Classification

Weakness
  • CWE-502 Deserialization of Untrusted Data

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.