Anviz CX2 Lite and CX7 are vulnerable to unauthenticated firmware uploads. This causes crafted
archives to be accepted, enabling attackers to plant and execute code
and obtain a reverse shell.
Anviz did not respond to CISA's attempts to coordinate these
vulnerabilities. Users should contact Anviz for more information at
https://www.anviz.com/contact-us.html.