CVE-2025-15348
Deserialization RCE in Anritsu ShockLine CHX File Parsing
Publication date: 2026-01-23
Last updated on: 2026-02-23
Assigner: Zero Day Initiative
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| anritsu | shockline | 2025.4.2 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-502 | The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a remote code execution flaw in Anritsu ShockLine products related to how CHX files are parsed. It occurs because the software does not properly validate user-supplied data during deserialization, allowing untrusted data to be processed. An attacker can exploit this by tricking a user into visiting a malicious webpage or opening a malicious file, which then allows the attacker to execute arbitrary code within the context of the current process. [1]
How can this vulnerability impact me? :
If exploited, this vulnerability allows an attacker to execute arbitrary code on your system with the same privileges as the current process. This can lead to full compromise of confidentiality, integrity, and availability of the affected system, potentially allowing data theft, system manipulation, or denial of service. [1]
How can this vulnerability be detected on my network or system? Can you suggest some commands?
Detection of this vulnerability involves monitoring for the opening or processing of malicious CHX files or visiting malicious webpages that exploit the deserialization flaw. Since the vulnerability requires user interaction with a malicious CHX file, you can detect suspicious activity by scanning for CHX files received from untrusted sources and monitoring application logs for errors or unusual behavior during CHX file parsing. Specific commands are not provided in the available resources. [1]
What immediate steps should I take to mitigate this vulnerability?
Immediate mitigation steps include avoiding opening CHX files from untrusted or unknown sources and not visiting suspicious or untrusted webpages that could trigger the vulnerability. Applying any available patches or updates from Anritsu for the ShockLine product is also recommended. Additionally, educating users about the risk of opening untrusted files can help reduce exploitation chances. [1]