Anviz CX7 Firmware is vulnerable to an authenticated CSV upload that allows path traversal, enabling overwriting of arbitrary files such as /etc/shadow; when debug‑setting changes are combined, this facilitates unauthorized SSH access. This relative path traversal flaw is identified as CWE‑23 and undermines confidentiality, integrity, and control of the device.

The affected product is Anviz CX7 Firmware. No specific firmware version details are listed, so all released firmware editions should be considered potentially vulnerable.

The CVSS score of 4.9 indicates a moderate severity. The EPSS score of less than 1% implies a very low predicted exploitation probability at present. The vulnerability is not listed on the CISA KEV catalog. The attack vector requires authenticated access to the CSV upload endpoint; once authenticated, the attacker can overwrite arbitrary files, potentially enabling unauthorized SSH access. While the likelihood of exploitation is low now, organizations should treat this as a moderate risk awaiting vendor remediation.