Vulnerabilities
Vulnerable Software
Anviz:  Security Vulnerabilities
Anviz CX7 Firmware is vulnerable to an authenticated CSV upload which allows path traversal to overwrite arbitrary files (e.g., /etc/shadow), enabling unauthorized SSH access when combined with debug‑setting changes.
CVSS Score
4.9
EPSS Score
0.004
Published
2026-04-17
Anviz CX7 Firmware is  vulnerable because the application embeds reusable certificate/key material, enabling decryption of MQTT traffic and potential interaction with device messaging channels at scale.
CVSS Score
7.7
EPSS Score
0.001
Published
2026-04-17
Anviz access control devices allow unverified password change which allows remote attackers to change the administrator password without prior authentication.
CVSS Score
9.8
EPSS Score
0.021
Published
2019-12-02
Anviz CrossChex access control management software 4.3.8.0 and 4.3.12 is vulnerable to a buffer overflow vulnerability.
CVSS Score
9.8
EPSS Score
0.507
Published
2019-12-02
Anviz access control devices perform cleartext transmission of sensitive information (passwords/pins and names) when replying to query on port tcp/5010.
CVSS Score
7.5
EPSS Score
0.008
Published
2019-12-02
Anviz access control devices expose credentials (names and passwords) by allowing remote attackers to query this information without credentials via port tcp/5010.
CVSS Score
7.5
EPSS Score
0.018
Published
2019-12-02
Anviz access control devices expose private Information (pin code and name) by allowing remote attackers to query this information without credentials via port tcp/5010.
CVSS Score
5.3
EPSS Score
0.014
Published
2019-12-02
The Anviz Management System for access control has insufficient logging for device events such as door open requests.
CVSS Score
7.5
EPSS Score
0.011
Published
2019-12-02
Anviz access control devices allow remote attackers to issue commands without a password.
CVSS Score
9.8
EPSS Score
0.019
Published
2019-12-02
Anviz access control devices are vulnerable to replay attacks which could allow attackers to intercept and replay open door requests.
CVSS Score
7.5
EPSS Score
0.011
Published
2019-12-02


Contact Us

Shodan ® - All rights reserved