Anviz CX2 Lite and CX7 Unauthenticated Debug Settings Modification Vulnerability

A vulnerability exists in Anviz CX2 Lite and CX7 products, allowing unauthenticated POST requests to alter debug settings, such as enabling SSH. This unauthorized modification can lead to subsequent compromises of the affected devices.

Impact

Exploitation of this vulnerability could result in unauthorized changes to device configurations, potentially allowing for later exploitation or compromise of the device.

Remediation

Anviz did not respond to CISA's attempts to coordinate these vulnerabilities. Users should contact Anviz for more information through their official contact page.