Vulnerability Advisory : Anviz Products Download of Code Without Integrity Check with LOW Attack Complexity

Anviz CX2 Lite and CX7 are vulnerable to unverified update packages that can be uploaded. The device unpacks and executes a script resulting in unauthenticated remote code execution.