Vulnerabilidades de Anritsu
CVEs publicadas que afetam produtos de Anritsu: 5 registro(s), com severidade, exploração e correções.
Shockline 2Vectorstar 2Remote Spectrum Monitor MS27100A 1Remote Spectrum Monitor MS27101A 1Remote Spectrum Monitor MS27102A 1Remote Spectrum Monitor MS27103A 1
CVE-2026-3356
Crítica · 9.3
CWE-306 31/03/2026
Bypass de Autenticação no MS27102A Remote Spectrum Monitor (CVE-2026-3356)
O MS27102A Remote Spectrum Monitor é vulnerável a um bypass de autenticação que permite que usuários não autorizados acessem e manipulem sua interface de gerenciamento. Como o dispositivo não oferece nenhum mecanismo para habilitar ou configurar a autenticação, o problema é inerente ao seu projeto, e não a um erro de implantação.
CVE-2025-15351
Alta · 7.8
CWE-502 23/01/2026
Anritsu VectorStar CHX File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability
Anritsu VectorStar CHX File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Anritsu VectorStar. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of CHX files. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-27040.
CVE-2025-15350
Alta · 7.8
CWE-502 23/01/2026
Anritsu VectorStar CHX File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability
Anritsu VectorStar CHX File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Anritsu VectorStar. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of CHX files. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-27039.
CVE-2025-15349
Alta · 7.5
CWE-362 23/01/2026
Anritsu ShockLine SCPI Race Condition Remote Code Execution Vulnerability
Anritsu ShockLine SCPI Race Condition Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Anritsu ShockLine. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the SCPI component. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-27315.
CVE-2025-15348
Alta · 7.8
CWE-502 23/01/2026
Anritsu ShockLine CHX File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability
Anritsu ShockLine CHX File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Anritsu ShockLine. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of CHX files. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-27833.