Anritsu ShockLine CHX File Parsing Directory Traversal Remote Code Execution Vulnerability

A remote code execution vulnerability has been identified in Anritsu ShockLine, specifically within the CHX file parsing process. This issue arises from inadequate validation of user-supplied paths before they are used in file operations, allowing remote attackers to execute arbitrary code on affected systems. Exploitation of this vulnerability requires user interaction, as the target must open a malicious CHX file.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the affected system, in the context of the current user.

Remediation

Users can upgrade to ShockLine version 2025.4.2 to address this vulnerability.