CVE-2026-3356 — Missing Authentication for Critical Function vulnerability in Anritsu Remote Spectrum Monitor

CVE-2026-3356

Missing Authentication for Critical Function vulnerability in Anritsu Remote Spectrum Monitor PUBLISHED

Description (CNA)

The MS27102A Remote Spectrum Monitor is vulnerable to an authentication bypass that allows unauthorized users to access and manipulate its management interface. Because the device provides no mechanism to enable or configure authentication, the issue is inherent to its design rather than a deployment error.

Affected (CNA)

Vendor / product	Versions
Anritsu / Remote Spectrum Monitor MS27100A	affected All versions
Anritsu / Remote Spectrum Monitor MS27101A	affected All versions
Anritsu / Remote Spectrum Monitor MS27102A	affected All versions
Anritsu / Remote Spectrum Monitor MS27103A	affected All versions

CWE

CWE-306

References

https://www.cisa.gov/news-events/ics-advisories/icsa-26-090-01

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.