Keysight IxChariot Endpoint before 9.5.102 contains a heap-based buffer overflow. An unauthenticated remote attacker can send a specially crafted packet to cras…

CVE-2017-20241 describes a heap-based buffer overflow vulnerability in Keysight IxChariot Endpoint versions prior to 9.5.102. The flaw allows an unauthenticated remote attacker to send a specially crafted packet to the affected endpoint. Exploitation can result in a crash of the endpoint service (denial of service) or potentially enable arbitrary code execution. No authentication is required to exploit this vulnerability, significantly increasing its risk. The vulnerability was publicly disclosed via NVD and is referenced in a CISA advisory. Keysight has published a security advisory acknowledging the issue and recommending upgrade to version 9.5.102 or later. The severity is rated High due to the potential for remote code execution without authentication.