Anviz Multiple Products

Multiple Anviz biometric access control products (CX2 Lite, CX7 firmware, and CrossChex Standard software) contain numerous critical vulnerabilities including missing authentication, command injection, and improper authorization flaws. All firmware versions are affected, with CVSS scores reaching 9.8, meaning attackers could gain full root-level control, execute arbitrary code, capture sensitive data, and compromise credentials on these physical security devices. Developers and security teams integrating or managing Anviz hardware should treat these devices as untrusted until patches are available and isolate them from sensitive network segments.