Anviz CX2 Lite is vulnerable to an authenticated command injection via a
filename parameter that enables arbitrary command execution (e.g.,
starting telnetd), resulting in root‑level access.
Anviz did not respond to CISA's attempts to coordinate these
vulnerabilities. Users should contact Anviz for more information at
https://www.anviz.com/contact-us.html.