Anviz Multiple Products Unauthenticated Debug Information Disclosure Vulnerability

A vulnerability exists in Anviz CX2 Lite and CX7 products, allowing unauthenticated access to debug configuration details such as SSH/RTTY status. This information could aid attackers in reconnaissance efforts against the device.

Impact

Exploitation of this vulnerability could enable attackers to gather sensitive debug information that could be used for further attacks on the device.

Remediation

Anviz did not respond to CISA's attempts to coordinate these vulnerabilities. Users should contact Anviz for more information through their official contact page.