← Voltar à pesquisa de CVEs

CVE-2026-31927

Anviz CX7 Firmware

Descrição

Anviz CX7 Firmware is vulnerable to an authenticated CSV upload which allows path traversal to overwrite arbitrary files (e.g., /etc/shadow), enabling unauthorized SSH access when combined with debug‑setting changes

CVSS 4.9EPSS 0.35400000000000004%Risco 0.51
Ver fonte
Publicação
2026-04-17 20:16:33
Versões afetadas
unknown
Tipo
Firmware
Vetor
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N