Anviz

Anviz CX2 Lite and CX7 are vulnerable to unauthenticated POST requests that modify debug settings (e.g., enabling SSH),

Anviz CrossChex Standard lacks source verification in the client/server channel, enabling TCP packet injection by an at

Anviz CX2 Lite and CX7 are vulnerable to unverified update packages that can be uploaded. The device unpacks and execute

Anviz CX2 Lite is vulnerable to an authenticated command injection via a filename parameter that enables arbitrary comm

Anviz CX2 Lite and CX7 are vulnerable to unauthenticated firmware uploads. This causes crafted archives to be accepted,

Anviz CX7 Firmware is vulnerable to the most recently captured test photo that can be retrieved without authentication,

Anviz CX2 Lite and CX7 administrative sessions occur over HTTP, enabling on‑path attackers to sniff credentials and ses

Anviz CX7 Firmware is vulnerable to an unauthenticated POST to the device that captures a photo with the front facing c

Anviz CrossChex Standard is vulnerable when an attacker manipulates the TDS7 PreLogin to disable encryption, causing da

Anviz CX2 Lite and CX7 are vulnerable to unauthenticated access that discloses debug configuration details (e.g., SSH/R

Anviz CX7 Firmware is  vulnerable because the application embeds reusable certificate/key material, enabling decryption

Anviz CX7 Firmware is vulnerable to an authenticated CSV upload which allows path traversal to overwrite arbitrary files