Description
Anviz CX2 Lite and CX7 are vulnerable to unauthenticated firmware uploads. This causes crafted archives to be accepted, enabling attackers to plant and execute code and obtain a reverse shell.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Anviz Anviz CX7 Firmware
Default version status: unaffected
All versionsaffected
Anviz Anviz CX2 Lite Firmware
Default version status: unaffected
All versionsaffected