Critical Authentication Bypass in Anritsu Remote Spectrum Monitors Left Unpatched

#cybersecurity #infosec

Summary

CISA and Anritsu report a critical authentication bypass vulnerability (CVE-2026-3356) affecting all versions of its Remote Spectrum Monitors, which the company does not plan to patch. The flaw allows unauthenticated remote attackers to take full control of the devices, potentially disrupting critical communications and defense infrastructure.

Take Action:

Since Anritsu will not patch this critical flaw, these devices are permanently insecure. Make sure to isolate them from the internet and all untrusted networks. Ideally, consider replacing them with hardware that supports modern authentication standards because no isolation is perfect.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines