Skip to content
OpenAdvisories
Medium · 5.3 CVE-2026-32648 EUVD-2026-23478

Anviz Products Missing Authorization

Published Apr 17, 2026 · Updated Apr 17, 2026 · Assigned by icscert

Description

Anviz CX2 Lite and CX7 are vulnerable to unauthenticated access that discloses debug
configuration details (e.g., SSH/RTTY status), assisting attackers in
reconnaissance against the device.

Affected products

VendorProductAffectedFixed
Anviz Anviz CX7 Firmware All versions —
Anviz Anviz CX2 Lite Firmware All versions —

Advisories 1

References