CVE-2025-15350CWE-502

Anritsu VectorStar CHX File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability

High · published January 23, 2026

CVSS v3.0
7.8
EPSS
0%
Percentile
29.3
In the wild
Unconfirmed
What it is

🚨 A crafty CHX file could be your worst nightmare! This vulnerability allows remote attackers to execute arbitrary code just by enticing a user to visit a malicious page or open a file. 🔥 Think of a restaurant where the chef blindly follows any recipe card handed to them, even those from a stranger—they might end up cooking something dangerous! In this case, the VectorStar software is just as trusting, parsing CHX files without checking if the contents are safe. An attacker could gain full control of the affected installation, executing any code of their choice. This means they could access sensitive information, alter settings, or even deploy malware to compromise your systems. The stakes are high—user interaction is required, but once triggered, the consequences could be absolutely devastating!

Put simply

Think of a restaurant where the chef blindly follows any recipe card handed to them, even those from a stranger—they might end up cooking something dangerous! In this case, the VectorStar software is just as trusting, parsing CHX files without checking if the contents are safe. This vulnerability arises from the improper validation of user-supplied data during the parsing of CHX files, leading to the deserialization of untrusted data. As a result, an attacker can execute arbitrary code in the context of the current user process.

What to do

An attacker could gain full control of the affected installation, executing any code of their choice. This means they could access sensitive information, alter settings, or even deploy malware to compromise your systems. The stakes are high—user interaction is required, but once triggered, the consequences could be absolutely devastating! To protect your systems, update to the latest version of Anritsu VectorStar immediately. Educate users about the risks of opening suspicious files or visiting untrusted links. Strengthen your security measures by implementing file validation protocols. You've got this! Follow these steps, and you’ll keep your systems safe and sound. 🛡️

The record
Technical detail
CVSS v3.0
7.8 · HIGH
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00366 · 29.3th percentile
Weakness
CWE-502 · Deserialization of Untrusted Data
Published
2026-01-23T03:31Z
EPSS history
Timeline
  • 23 JAN 03:31Z
    Anritsu VectorStar CHX File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability
    cvelistv5