CVE-2026-3356

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-3356", "assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6", "state": "PUBLISHED", "assignerShortName": "icscert", "dateReserved": "2026-02-27T18:08:31.007Z", "datePublished": "2026-03-31T18:40:17.359Z", "dateUpdated": "2026-04-01T13:43:44.724Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6", "shortName": "icscert", "dateUpdated": "2026-03-31T18:40:17.359Z"}, "title": "Missing Authentication for Critical Function vulnerability in Anritsu Remote Spectrum Monitor", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-306", "description": "CWE-306 Missing authentication for critical function", "type": "CWE"}]}], "affected": [{"vendor": "Anritsu", "product": "Remote Spectrum Monitor MS27100A", "versions": [{"status": "affected", "version": "All versions", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "Anritsu", "product": "Remote Spectrum Monitor MS27101A", "versions": [{"status": "affected", "version": "All versions", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "Anritsu", "product": "Remote Spectrum Monitor MS27102A", "versions": [{"status": "affected", "version": "All versions", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "Anritsu", "product": "Remote Spectrum Monitor MS27103A", "versions": [{"status": "affected", "version": "All versions", "versionType": "custom"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The MS27102A Remote Spectrum Monitor is vulnerable to an authentication bypass that allows unauthorized users to access and manipulate its management interface. Because the device provides no mechanism to enable or configure authentication, the issue is inherent to its design rather than a deployment error.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "The MS27102A Remote Spectrum Monitor is vulnerable to an authentication bypass that allows unauthorized users to access and manipulate its management interface. Because the device provides no mechanism to enable or configure authentication, the issue is inherent to its design rather than a deployment error.&nbsp;<br>"}]}], "references": [{"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-090-01", "tags": ["government-resource"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV4_0": {"attackVector": "NETWORK", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "userInteraction": "NONE", "vulnConfidentialityImpact": "HIGH", "subConfidentialityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "subIntegrityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subAvailabilityImpact": "NONE", "exploitMaturity": "NOT_DEFINED", "Safety": "NOT_DEFINED", "Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "valueDensity": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "version": "4.0", "baseSeverity": "CRITICAL", "baseScore": 9.3, "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"}}], "workarounds": [{"lang": "en", "value": "Anritsu has no plans to fix this issue. Anritsu recommends that users deploy Remote Spectrum Monitor within secure network environments to mitigate potential risks.\n\n\n\nUsers can contact Anritsu Technical Support (1-800-267-4878) for more information.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Anritsu has no plans to fix this issue. Anritsu recommends that users deploy Remote Spectrum Monitor within secure network environments to mitigate potential risks.\n<br>\n<br>Users can contact Anritsu Technical Support (1-800-267-4878) for more information."}]}], "credits": [{"lang": "en", "value": "Souvik Kandar", "type": "reporter"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.1"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-04-01T13:43:38.631220Z", "id": "CVE-2026-3356", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-01T13:43:44.724Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-3356", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-04-01T13:43:38.631220Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-01T13:43:41.554Z"}}], "cna": {"title": "Missing Authentication for Critical Function vulnerability in Anritsu Remote Spectrum Monitor", "source": {"discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "reporter", "value": "Souvik Kandar"}], "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 9.3, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Anritsu", "product": "Remote Spectrum Monitor MS27100A", "versions": [{"status": "affected", "version": "All versions", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "Anritsu", "product": "Remote Spectrum Monitor MS27101A", "versions": [{"status": "affected", "version": "All versions", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "Anritsu", "product": "Remote Spectrum Monitor MS27102A", "versions": [{"status": "affected", "version": "All versions", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "Anritsu", "product": "Remote Spectrum Monitor MS27103A", "versions": [{"status": "affected", "version": "All versions", "versionType": "custom"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-090-01", "tags": ["government-resource"]}], "workarounds": [{"lang": "en", "value": "Anritsu has no plans to fix this issue. Anritsu recommends that users deploy Remote Spectrum Monitor within secure network environments to mitigate potential risks.\n\n\n\nUsers can contact Anritsu Technical Support (1-800-267-4878) for more information.", "supportingMedia": [{"type": "text/html", "value": "Anritsu has no plans to fix this issue. Anritsu recommends that users deploy Remote Spectrum Monitor within secure network environments to mitigate potential risks.\n<br>\n<br>Users can contact Anritsu Technical Support (1-800-267-4878) for more information.", "base64": false}]}], "x_generator": {"engine": "Vulnogram 1.0.1"}, "descriptions": [{"lang": "en", "value": "The MS27102A Remote Spectrum Monitor is vulnerable to an authentication bypass that allows unauthorized users to access and manipulate its management interface. Because the device provides no mechanism to enable or configure authentication, the issue is inherent to its design rather than a deployment error.", "supportingMedia": [{"type": "text/html", "value": "The MS27102A Remote Spectrum Monitor is vulnerable to an authentication bypass that allows unauthorized users to access and manipulate its management interface. Because the device provides no mechanism to enable or configure authentication, the issue is inherent to its design rather than a deployment error.&nbsp;<br>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-306", "description": "CWE-306 Missing authentication for critical function"}]}], "providerMetadata": {"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6", "shortName": "icscert", "dateUpdated": "2026-03-31T18:40:17.359Z"}}}, "cveMetadata": {"cveId": "CVE-2026-3356", "state": "PUBLISHED", "dateUpdated": "2026-04-01T13:43:44.724Z", "dateReserved": "2026-02-27T18:08:31.007Z", "assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6", "datePublished": "2026-03-31T18:40:17.359Z", "assignerShortName": "icscert"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Remote Spectrum Monitor MS27100A", "vendor": "Anritsu", "versions": [{"status": "affected", "version": "All versions", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "Remote Spectrum Monitor MS27101A", "vendor": "Anritsu", "versions": [{"status": "affected", "version": "All versions", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "Remote Spectrum Monitor MS27102A", "vendor": "Anritsu", "versions": [{"status": "affected", "version": "All versions", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "Remote Spectrum Monitor MS27103A", "vendor": "Anritsu", "versions": [{"status": "affected", "version": "All versions", "versionType": "custom"}]}], "source": "ics-cert@hq.dhs.gov"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The MS27102A Remote Spectrum Monitor is vulnerable to an authentication bypass that allows unauthorized users to access and manipulate its management interface. Because the device provides no mechanism to enable or configure authentication, the issue is inherent to its design rather than a deployment error."}, {"lang": "es", "value": "El monitor de espectro remoto MS27102A es vulnerable a una omisi\u00f3n de autenticaci\u00f3n que permite a usuarios no autorizados acceder y manipular su interfaz de gesti\u00f3n. Debido a que el dispositivo no proporciona ning\u00fan mecanismo para habilitar o configurar la autenticaci\u00f3n, el problema es inherente a su dise\u00f1o en lugar de un error de implementaci\u00f3n."}], "id": "CVE-2026-3356", "lastModified": "2026-07-24T20:10:00.147", "metrics": {"cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 9.3, "baseSeverity": "CRITICAL", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "ics-cert@hq.dhs.gov", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-3356", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-04-01T13:43:38.631220Z", "version": "2.0.3"}}]}, "published": "2026-03-31T19:16:28.943", "references": [{"source": "ics-cert@hq.dhs.gov", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-090-01"}], "sourceIdentifier": "ics-cert@hq.dhs.gov", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-306"}], "source": "ics-cert@hq.dhs.gov", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "Remote Spectrum Monitor MS27100A", "source": "cna", "vendor": "Anritsu"}, "product": "remote_spectrum_monitor_ms27100a", "vendor": "anritsu"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "Remote Spectrum Monitor MS27101A", "source": "cna", "vendor": "Anritsu"}, "product": "remote_spectrum_monitor_ms27101a", "vendor": "anritsu"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "Remote Spectrum Monitor MS27102A", "source": "cna", "vendor": "Anritsu"}, "product": "remote_spectrum_monitor_ms27102a", "vendor": "anritsu"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "Remote Spectrum Monitor MS27103A", "source": "cna", "vendor": "Anritsu"}, "product": "remote_spectrum_monitor_ms27103a", "vendor": "anritsu"}], "analysis": {"en": {"generated_at": "2026-03-31T20:20:35.528846+00:00", "value": {"mitigation_remediation": ["Deploy the Remote Spectrum Monitor within a secure, isolated network segment to limit exposure.", "Restrict inbound management traffic to trusted IP addresses or use VPN tunnels.", "Contact Anritsu Technical Support for guidance and verify that no firmware updates address the issue."], "summary": {"action": "Isolate Device", "impact": "Authentication Bypass"}, "threat_synthesis": {"affected_systems": "Affected vendors and products are Anritsu Remote Spectrum Monitor models MS27100A, MS27101A, MS27102A, and MS27103A. Specific version numbers are not disclosed, but all devices of these series share the same design flaw. The vulnerability applies to each of these monitors wherever they are connected to a network.", "description_and_impact": "The MS27102A Remote Spectrum Monitor is afflicted by an authentication bypass that permits any network user to gain full control of the device\u2019s management interface. The vendors lack any mechanism to enforce authentication or to make it configurable, making the flaw inherent to the device\u2019s design. Consequently an attacker can modify settings, view sensitive data, and potentially disrupt normal operation, resulting in loss of confidentiality, integrity, and availability. This weakness aligns with CWE-306, missing authentication for a critical function.", "risk_and_exploitability": "With a CVSS score of 9.3, this vulnerability is rated critical. The EPSS score is unavailable, and the flaw is not listed in the CISA KEV catalog, but the lack of authentication makes exploitation straightforward over the network. The likely attack vector is remote access via the device\u2019s open management interface, which can be reached from within a local network or over any otherwise trusted connection. Because no patch is offered, the recommendation is to restrict connectivity to the device and place it in a hardened environment."}}}}, "created": "2026-03-31T20:37:26.720655+00:00", "updated": "2026-04-02T07:53:13.725934+00:00", "vendors": ["anritsu", "anritsu$PRODUCT$remote_spectrum_monitor_ms27100a", "anritsu$PRODUCT$remote_spectrum_monitor_ms27101a", "anritsu$PRODUCT$remote_spectrum_monitor_ms27102a", "anritsu$PRODUCT$remote_spectrum_monitor_ms27103a"]}