EUVD-2026-23533
GHSA-qg37-cwrh-945r
CVSS VectorNVD
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Lifecycle Timeline
5DescriptionNVD
Anviz CrossChex Standard lacks source verification in the client/server channel, enabling TCP packet injection by an attacker on the same network to alter or disrupt application traffic.
AnalysisAI
TCP packet injection vulnerability in Anviz CrossChex Standard allows adjacent network attackers to manipulate or disrupt client/server communications without authentication. The application fails to verify the source of TCP packets, enabling attackers on the same network segment to inject malicious traffic and alter application behavior or cause denial of service. …
Sign in for full analysis, threat intelligence, and remediation guidance.
RemediationAI
Within 24 hours: Identify all instances of Anviz CrossChex Standard in your environment and document network segment placement. Within 7 days: Implement network segmentation to isolate affected systems from untrusted internal networks; enable TCP packet source validation and anomaly detection on network switches serving CrossChex deployments. …
Sign in for detailed remediation steps.
Share
External POC / Exploit Code
Leaving vuln.today