Anviz CrossChex Standard
lacks source verification in the client/server channel, enabling TCP
packet injection by an attacker on the same network to alter or disrupt
application traffic.
Anviz did not respond to CISA's attempts to coordinate these
vulnerabilities. Users should contact Anviz for more information at
https://www.anviz.com/contact-us.html.