Anviz CX7 Firmware Path Traversal Vulnerability Allowing Unauthorized SSH Access

A vulnerability exists in Anviz CX7 Firmware that allows authenticated users to upload CSV files, which can be exploited to perform a path traversal attack. This vulnerability enables the overwriting of arbitrary files, such as the /etc/shadow file. When combined with certain changes to the device's debug settings, this flaw could be used to gain unauthorized SSH access to the device.

Impact

Exploitation of this vulnerability could lead to unauthorized SSH access on the affected device.

Remediation

Anviz did not respond to CISA's attempts to coordinate these vulnerabilities. Users should contact Anviz for more information.