PT-2025-54184 · Anritsu · Vectorstar

Published 2025-12-30 · Updated 2026-01-23 · CVE-2025-15351

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Anritsu VectorStar (affected versions not specified)

Description A flaw exists in the parsing of CHX files due to insufficient validation of user-supplied data, leading to deserialization of untrusted data. This can allow remote attackers to execute arbitrary code on affected installations of Anritsu VectorStar. User interaction is required, specifically the target must open a malicious file. The issue was identified as ZDI-CAN-27040.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2025-15351

ZDI-25-1202

Affected Products

Vectorstar

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-15351 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-25-1202 · Security Note
• https://osv.dev/vulnerability/CVE-2025-15351 · Vendor Advisory
• https://twitter.com/CVEnew/status/2014576942213955933 · Twitter Post