CVE-2026-33569CWE-319

Anviz Products Cleartext Transmission of Sensitive Information

Medium · published April 17, 2026

CVSS v3.1
6.5
EPSS
0%
Percentile
22.2
In the wild
Unconfirmed
What it is

Anviz CX2 Lite and CX7 administrative sessions occur over HTTP, enabling

on‑path attackers to sniff credentials and session data, which can be

used to compromise the device.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00306 · 22.2th percentile
Weakness
CWE-319 · Cleartext Transmission of Sensitive Information
Published
2026-04-17T19:30Z
EPSS history
Timeline
  • 17 APR 19:30Z
    Anviz Products Cleartext Transmission of Sensitive Information
    cvelistv5