Anviz CX7 Firmware Front-Facing Camera Photo Capture Vulnerability

A vulnerability exists in Anviz CX7 Firmware that allows an unauthenticated POST request to capture a photo using the front-facing camera. This exposure of visual information could reveal sensitive details about the deployment environment.

Impact

Exploitation of this vulnerability could lead to unauthorized capture of images, potentially disclosing critical information about the environment where the device is deployed.

Remediation

Anviz did not respond to CISA's attempts to coordinate these vulnerabilities. Users should contact Anviz for more information through their official contact page.