CVE-2026-31927
Path Traversal in Anviz CX7 Firmware Enables Unauthorized SSH Access
Publication date: 2026-04-17
Last updated on: 2026-05-04
Assigner: ICS-CERT
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| anviz | cx7_firmware | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-23 | The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such as ".." that can resolve to a location that is outside of that directory. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
The Anviz CX7 Firmware has a vulnerability involving an authenticated CSV upload feature that allows an attacker to perform path traversal. This means an attacker who is authenticated can upload a specially crafted CSV file to overwrite arbitrary files on the device.
For example, an attacker could overwrite critical system files such as /etc/shadow, which stores password hashes.
When combined with changes to debug settings, this can enable unauthorized SSH access to the device.
How can this vulnerability impact me? :
This vulnerability can allow an attacker with authenticated access to overwrite important system files, potentially leading to unauthorized access to the device via SSH.
Such unauthorized access could compromise the security and integrity of the device and any network it is connected to.
The CVSS score indicates a moderate impact with high integrity impact but no confidentiality or availability impact.
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
The vulnerability in Anviz CX7 Firmware allows an authenticated user to perform a CSV upload that leads to path traversal and arbitrary file overwrite, such as overwriting /etc/shadow. This can enable unauthorized SSH access when combined with debug-setting changes.
Such unauthorized access and potential compromise of sensitive system files could lead to violations of security requirements in common standards and regulations like GDPR and HIPAA, which mandate protection of personal data and secure access controls.
Therefore, exploitation of this vulnerability could negatively impact compliance by enabling unauthorized access to systems that may store or process regulated data.