Description
Anviz CX2 Lite and CX7 are vulnerable to unauthenticated firmware uploads. This causes crafted
archives to be accepted, enabling attackers to plant and execute code
and obtain a reverse shell.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Anviz | Anviz CX7 Firmware | All versions | — |
| Anviz | Anviz CX2 Lite Firmware | All versions | — |
Advisories 1
- ICSA-26-106-03 Anviz Multiple Products CISA ICS & IT advisories · Apr 16, 2026