CVE-2025-7976

Anritsu ShockLine is affected by CVE-2025-7976 due to a CHX file parsing deserialization flaw caused by insufficient validation of user-supplied data. This allows remote code execution when a user visits a malicious page or opens a malicious CHX file, with the attacker needing only user interacti...

CVE-2025-7975

Anritsu ShockLine CHX file parsing is vulnerable to a directory traversal leading to remote code execution. Root cause: missing validation of a user-supplied path before it is used in file operations, enabling code execution in the attacker’s context after user interaction (visiting a malicious p...