Weakness
Anviz CX2 Lite and CX7 are vulnerable to unverified update packages that can be uploaded. The device unpacks and executes a script resulting in unauthenticated remote code execution.
Affected products
- anviz cx7_firmware
- anviz cx7
- anviz cx2_lite_firmware
- anviz cx2_lite
References
Find the bug before an attacker does.
Sign in with GitHub and run your first audit in under a minute. The free plan needs no credit card.