CVEvulnerability
CVE-2026-33569
6.5 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2026-04-17
- Last modified
- 2026-10-26
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-319
Description
Anviz CX2 Lite and CX7 administrative sessions occur over HTTP, enabling
on‑path attackers to sniff credentials and session data, which can be
used to compromise the device.
Affected configurations
• anviz cx7 firmware
• anviz cx2 lite firmware
Related
Weakness · CWE (1)
- CWE-319 Cleartext Transmission of Sensitive Information weakness
References
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-106-03.json Third Party Advisory
- https://www.anviz.com/contact-us.html Product
- https://www.cisa.gov/news-events/ics-advisories/icsa-26-106-03 US Government Resource