Known Vulnerabilities for Anviz Firmware by Anviz
Listed below are 4 of the newest known vulnerabilities associated with "Anviz Firmware" by "Anviz".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-35546 json | Anviz CX2 Lite and CX7 are vulnerable to unauthenticated firmware uploads. This causes crafted archives to be accepted, en... | Not Provided | 2026-04-17 | 2026-04-17 |
| CVE-2026-35061 json | Anviz CX7 Firmware is vulnerable to the most recently captured test photo that can be retrieved without authentication, rev... | Not Provided | 2026-04-17 | 2026-04-17 |
| CVE-2026-33093 json | Anviz CX7 Firmware is vulnerable to an unauthenticated POST to the device that captures a photo with the front facing camer... | Not Provided | 2026-04-17 | 2026-04-17 |
| CVE-2026-32324 json | Anviz CX7 Firmware is vulnerable because the application embeds reusable certificate/key material, enabling decryption of... | Not Provided | 2026-04-17 | 2026-04-17 |
| CVE-2026-31927 json | Anviz CX7 Firmware is vulnerable to an authenticated CSV upload which allows path traversal to overwrite arbitrary files (e... | Not Provided | 2026-04-17 | 2026-04-17 |
| CVE-2019-12392 json | Anviz access control devices allow remote attackers to issue commands without a password. | 9.8 - CRITICAL | 2019-12-02 | 2020-08-24 |
| CVE-2019-12390 json | Anviz access control devices expose private Information (pin code and name) by allowing remote attackers to query this inform... | 5.3 - MEDIUM | 2019-12-02 | 2020-08-24 |
| CVE-2019-12389 json | Anviz access control devices expose credentials (names and passwords) by allowing remote attackers to query this information ... | 7.5 - HIGH | 2019-12-02 | 2020-08-24 |
| CVE-2019-12388 json | Anviz access control devices perform cleartext transmission of sensitive information (passwords/pins and names) when replying... | 7.5 - HIGH | 2019-12-02 | 2020-08-24 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Anviz | Anviz Firmware | - |