Description
Anviz CX7 Firmware is vulnerable to an authenticated CSV upload which allows path traversal to overwrite arbitrary files (e.g., /etc/shadow), enabling unauthorized SSH access when combined with debug‑setting changes.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Anviz | Anviz CX7 Firmware | All versions | — |
Advisories 1
- ICSA-26-106-03 Anviz Multiple Products CISA ICS & IT advisories · Apr 16, 2026