Description
KeySight N6854A和N6841A RF传感器中存在不安全的反序列化漏洞，此漏洞是由于处理请求时存在JAVA序列化问题导致的。
KeySight N6854A和N6841A RF传感器不安全的反序列化漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.cisa.gov/news-events/ics-advisories/icsa-22-146-01
https://www.sonicwall.com/blog/keysight-rf-sensor-vulnerability
https://www.keysight.com/au/en/strikes/exploits/webapp/exec/cve_2022_1660_keysight_n6854a_and_n6841a_rf_sensor_insecure_deserialization.xml
https://advisories.checkpoint.com/defense/advisories/public/2022/cpai-2022-0716.html/
https://www.cyber.gc.ca/en/alerts-advisories/control-systems-keysight-technologies-security-advisory-av22-291
https://www.redpacketsecurity.com/keysight-n6854a-geolocation-server-and-n6841a-rf-sensor-software-code-execution-cve-2022-1660/
https://avd.aliyun.com/detail?id=AVD-2022-1660
https://radicalnotion.ai/vendor/keysight