Anviz CX2 Lite and CX7 are vulnerable to unverified update packages that can be uploaded. The device unpacks and executes a script resulting in unauthenticated remote code execution.
Affected Platforms
Anviz Cx7Anviz Cx2 LiteAnviz Cx7 FirmwareAnviz Cx2 Lite Firmware