Anviz
anviz
21 CVEs • 10 products
Products (10)
Click to collapseToggle
Products (10)
Click to collapse
CVEs (21)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Anviz 2Cx2 Lite Firmware Cx7 FirmwareJun 17, 2026 Apr 17, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 Anviz CX2 Lite and CX7 are vulnerable to unauthenticated POST requests that modify debug
settings (e.g., enabling SSH), allowing unauthorized state changes that
can facilitate later compromise. |
Anviz CrossChex Standard
lacks source verification in the client/server channel, enabling TCP
packet injection by an attacker on the same network to alter or disrupt
application traffic. |
1Anviz 2Cx2 Lite Firmware Cx7 FirmwareJul 10, 2026 Apr 17, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Anviz CX2 Lite and CX7 are vulnerable to unverified update packages that can be uploaded. The device unpacks and executes a script resulting in unauthenticated remote code execution. |
Anviz CX2 Lite is vulnerable to an authenticated command injection via a
filename parameter that enables arbitrary command execution (e.g.,
starting telnetd), resulting in root‑level access. |
1Anviz 2Cx2 Lite Firmware Cx7 FirmwareJun 17, 2026 Apr 17, 2026 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Anviz CX2 Lite and CX7 are vulnerable to unauthenticated firmware uploads. This causes crafted
archives to be accepted, enabling attackers to plant and execute code
and obtain a reverse shell. |
Anviz CX7 Firmware is vulnerable to the most recently captured test photo that can be
retrieved without authentication, revealing sensitive operational
imagery. |
1Anviz 2Cx2 Lite Firmware Cx7 FirmwareJun 17, 2026 Apr 17, 2026 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Anviz CX2 Lite and CX7 administrative sessions occur over HTTP, enabling
on‑path attackers to sniff credentials and session data, which can be
used to compromise the device. |
Anviz CX7 Firmware is vulnerable to an unauthenticated POST to the device that captures
a photo with the front facing camera, exposing visual information about
the deployment environment. |
Anviz CrossChex Standard is vulnerable when an attacker manipulates the TDS7 PreLogin to disable
encryption, causing database credentials to be sent in plaintext and
enabling unauthorized database access. |
1Anviz 2Cx2 Lite Firmware Cx7 FirmwareJun 17, 2026 Apr 17, 2026 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Anviz CX2 Lite and CX7 are vulnerable to unauthenticated access that discloses debug
configuration details (e.g., SSH/RTTY status), assisting attackers in
reconnaissance against the device. |
Anviz CX7 Firmware is
vulnerable because the application embeds reusable certificate/key
material, enabling decryption of MQTT traffic and potential interaction
with device messaging channels at scale. |
Anviz CX7 Firmware is vulnerable to an authenticated CSV upload which allows path traversal to overwrite arbitrary files (e.g., /etc/shadow), enabling unauthorized SSH access when combined with debug‑setting changes. |
Anviz CrossChex access control management software 4.3.8.0 and 4.3.12 is vulnerable to a buffer overflow vulnerability. |
Anviz access control devices allow unverified password change which allows remote attackers to change the administrator password without prior authentication. |
Anviz access control devices are vulnerable to replay attacks which could allow attackers to intercept and replay open door requests. |
Anviz access control devices allow remote attackers to issue commands without a password. |
The Anviz Management System for access control has insufficient logging for device events such as door open requests. |
Anviz access control devices expose private Information (pin code and name) by allowing remote attackers to query this information without credentials via port tcp/5010. |
Anviz access control devices expose credentials (names and passwords) by allowing remote attackers to query this information without credentials via port tcp/5010. |
Anviz access control devices perform cleartext transmission of sensitive information (passwords/pins and names) when replying to query on port tcp/5010. |