Anviz CX7 Firmware Missing Authentication Vulnerability Allowing Unauthorized Access to Sensitive Imagery

A vulnerability exists in Anviz CX7 Firmware that allows the most recently captured test photo to be retrieved without authentication. This flaw exposes sensitive operational imagery, potentially leading to unauthorized access to visual data that could be critical in a given context.

Impact

Exploitation of this vulnerability could result in unauthorized access to sensitive operational imagery, allowing attackers to capture or intercept visual data without permission.

Remediation

Anviz did not respond to CISA's attempts to coordinate these vulnerabilities. Users should contact Anviz for more information through their official contact page.