CVE-2025-15349CWE-362

Anritsu ShockLine SCPI Race Condition Remote Code Execution Vulnerability

High · published January 23, 2026

CVSS v3.0
7.5
EPSS
1%
Percentile
43.4
In the wild
Unconfirmed
What it is

🚨 A race condition with zero authentication opens the door wide for attackers! This vulnerability in Anritsu ShockLine lets nearby mischief-makers execute arbitrary code at will. 🔥 Think of it like a busy restaurant kitchen where the chef forgot to lock the door while preparing orders. A sneaky diner could just waltz in, mix up recipes, and even make a mess of what’s being cooked! This means an attacker can take control of the system without any prior authentication, leading to potentially devastating consequences. They could run unauthorized commands, alter configurations, or even shut down the service—imagine a chef throwing out all the ingredients just for fun!

Put simply

Think of it like a busy restaurant kitchen where the chef forgot to lock the door while preparing orders. A sneaky diner could just waltz in, mix up recipes, and even make a mess of what’s being cooked! The flaw stems from improper locking in the SCPI component, allowing attackers to race in and execute code in the process context without any authentication checks. It’s like leaving a toolbox open in a workshop—anyone can grab a tool and start tinkering!

What to do

This means an attacker can take control of the system without any prior authentication, leading to potentially devastating consequences. They could run unauthorized commands, alter configurations, or even shut down the service—imagine a chef throwing out all the ingredients just for fun! Immediate action is crucial! Update to the latest version of Anritsu ShockLine to patch this vulnerability and implement proper locking mechanisms in your application's SCPI operations to secure against similar attacks. Vigilance is key! You've got this! Secure your systems, follow the action items, and you'll block this vulnerability in no time! 🛡️

The record
Technical detail
CVSS v3.0
7.5 · HIGH
Vector
CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00521 · 43.4th percentile
Weakness
CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Published
2026-01-23T03:31Z
EPSS history
Timeline
  • 23 JAN 03:31Z
    Anritsu ShockLine SCPI Race Condition Remote Code Execution Vulnerability
    cvelistv5