Vulnerability Description
Anviz CX2 Lite and CX7 administrative sessions occur over HTTP, enabling on‑path attackers to sniff credentials and session data, which can be used to compromise the device.
CVSS Score
6.5
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Anviz | Cx7 Firmware | - |
| Anviz | Cx7 | - |
| Anviz | Cx2 Lite Firmware | - |
| Anviz | Cx2 Lite | - |
Related Weaknesses (CWE)
References
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-10Third Party Advisory
- https://www.anviz.com/contact-us.htmlProduct
- https://www.cisa.gov/news-events/ics-advisories/icsa-26-106-03US Government Resource
FAQ
What is CVE-2026-33569?
CVE-2026-33569 is a vulnerability with a CVSS score of 6.5 (MEDIUM). Anviz CX2 Lite and CX7 administrative sessions occur over HTTP, enabling on‑path attackers to sniff credentials and session data, which can be used to compromise the device.
How severe is CVE-2026-33569?
CVE-2026-33569 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-33569?
Check the references section above for vendor advisories and patch information. Affected products include: Anviz Cx7 Firmware, Anviz Cx7, Anviz Cx2 Lite Firmware, Anviz Cx2 Lite.