Vendors / Anviz Records 21 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 5
CVSS high 10
Exploited now Anviz records in CISA KEV No Anviz vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 46
Anviz access control devices allow unverified password change which allows remote attackers to change the administrator password without prior authentication.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02099 · Published 2019-12-02 · No fix listed CWE-287
Priority LOW 35
Anviz access control devices are vulnerable to replay attacks which could allow attackers to intercept and replay open door requests.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01069 · Published 2019-12-02 · No fix listed CWE-294
Priority LOW 35
The Anviz Management System for access control has insufficient logging for device events such as door open requests.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01127 · Published 2019-12-02 · No fix listed
Open these records in search → All records by CVSS severity
5 10 6 0 0
