CNNVD-202601-4197 Information

CNNVD ID

CNNVD-202601-4197

CVE-2025-15348

  • CNNVD Published: 2026-01-23

Description (Chinese)

Anritsu ShockLine是日本Anritsu公司的一系列矢量网络分析仪。 Anritsu ShockLine存在代码问题漏洞,该漏洞源于解析CHX文件时缺少对用户提供数据的验证,可能导致反序列化不受信任的数据并执行远程代码。

Description (English)

Anritsu ShockLine is a series of vector network analysers of Anritsu Japan. Anritsu ShockLine had a code problem loophole, which stemmed from the lack of validation of data provided by users when the CHX file was deciphered, which could lead to a back-serialization of untrusted data and the implementation of remote codes.

Hazard Level

Medium

Vulnerability Type

代码问题

Affected Vendor

Anritsu

Published

2026-01-23

Last Modified

2026-02-24

References

https://www.zerodayinitiative.com/advisories/ZDI-25-1199/

Share on: