Anviz Products Cleartext Transmission of Sensitive Information_CVE-2026-33569

6.5 / 10

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Description

Anviz CX2 Lite and CX7 administrative sessions occur over HTTP, enabling
on‑path attackers to sniff credentials and session data, which can be
used to compromise the device.

Basic Information

ID CVE-2026-33569

Source icscert

Published Apr 17, 2026 at 19:30

Affected Product

Vendor Anviz

Product Anviz CX7 Firmware

Version All versions

Affected Versions Anviz Anviz CX7 Firmware All versions
Anviz Anviz CX2 Lite Firmware All versions

CWE Classification

CWE-319

References

{
    "lastseen": "",
    "description": "Anviz\u00a0CX2 Lite and CX7 administrative sessions occur over HTTP, enabling \non\u2011path attackers to sniff credentials and session data, which can be \nused to compromise the device.",
    "published": "2026-04-17T19:30:46.066Z",
    "modified": "2026-04-17T19:30:46.066Z",
    "type": "cve",
    "title": "Anviz Products Cleartext Transmission of Sensitive Information",
    "source": "icscert",
    "references": "https://www.anviz.com/contact-us.html\nhttps://www.cisa.gov/news-events/ics-advisories/icsa-26-106-03\nhttps://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-106-03.json",
    "id": "CVE-2026-33569",
    "bulletinFamily": "",
    "cwe": [
        "CWE-319"
    ],
    "cvelist": null,
    "sourceData": "Anviz Anviz CX7 Firmware All versions\nAnviz Anviz CX2 Lite Firmware All versions",
    "sourceHref": "",
    "cvss": {
        "score": 6.5,
        "severity": "MEDIUM",
        "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
        "version": "3.1"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "Anviz CX7 Firmware",
    "version": "All versions",
    "vendor": "Anviz",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}