← Back

CVE-2026-33569

nvd nist
Published: Apr 17, 2026Modified: Jun 17, 2026

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Exploitability: 2.8 / Impact: 3.6
Source: ics-cert@hq.dhs.gov (Secondary)

Description

Anviz CX2 Lite and CX7 administrative sessions occur over HTTP, enabling on‑path attackers to sniff credentials and session data, which can be used to compromise the device.

Affected (2)

Anviz
2 products
Cx7 Firmware
Cx2 Lite Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Cx7 Firmware
All versions
Running on/withPlatform Versions
Anviz
Cx7
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Cx2 Lite Firmware
All versions
Running on/withPlatform Versions
Anviz
Cx2 Lite
All versions

Related CWEs

CWE-319
Cleartext Transmission of Sensitive Information
The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.

References (3)

Source: ics-cert@hq.dhs.gov
Third Party Advisory
Source: ics-cert@hq.dhs.gov
Product
Source: ics-cert@hq.dhs.gov
US Government Resource

Timeline

No history available yet.