← Volver al buscador de CVEs

CVE-2026-31927

Anviz CX7 Firmware

Descripción

Anviz CX7 Firmware is vulnerable to an authenticated CSV upload which allows path traversal to overwrite arbitrary files (e.g., /etc/shadow), enabling unauthorized SSH access when combined with debug‑setting changes

CVSS 4.9EPSS 0.35400000000000004%Riesgo 0.51
Ver fuente
Publicación
2026-04-17 20:16:33
Versiones afectadas
unknown
Tipo
Firmware
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N