PT-2025-54182 · Anritsu · Shockline

Published 2025-12-30 · Updated 2026-01-23 · CVE-2025-15349

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Anritsu ShockLine (affected versions not specified)

Description A network-adjacent attacker can execute arbitrary code on affected installations of Anritsu ShockLine without authentication. The issue stems from a race condition within the SCPI component due to insufficient locking mechanisms when operating on an object. This allows attackers to execute code within the current process.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

CVE-2025-15349

ZDI-25-1200

Affected Products

Shockline

References · 4

• https://zerodayinitiative.com/advisories/ZDI-25-1200 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-15349 · Security Note
• https://osv.dev/vulnerability/CVE-2025-15349 · Vendor Advisory
• https://twitter.com/CVEnew/status/2014576944025895013 · Twitter Post