Vulnerabilities

TI-2019-09236 CVE-2019-12388 · GHSA-r9vc-pgpj-x6f4

Anviz access control devices perform cleartext transmission of sensitive information…

LOW 34

Anviz access control devices perform cleartext transmission of sensitive information (passwords/pins and names) when replying to query on port tcp/5010.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00845 Published 2019-12-02 No fix listed CWE-319

TI-2019-09237 CVE-2019-12389 · GHSA-r33p-vh3m-6j34

Anviz access control devices expose credentials (names and passwords) by allowing remote…

LOW 36

Anviz access control devices expose credentials (names and passwords) by allowing remote attackers to query this information without credentials via port tcp/5010.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01787 Published 2019-12-02 No fix listed CWE-306

TI-2019-09238 CVE-2019-12390 · GHSA-fxf2-f3qj-46v8

Anviz access control devices expose private Information (pin code and name) by allowing…

LOW 27

Anviz access control devices expose private Information (pin code and name) by allowing remote attackers to query this information without credentials via port tcp/5010.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01399 Published 2019-12-02 No fix listed CWE-306

TI-2019-09240 CVE-2019-12392 · GHSA-4c88-v3q4-r75x

Anviz access control devices allow remote attackers to issue commands without a password.

MEDIUM 46

Anviz access control devices allow remote attackers to issue commands without a password.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01913 Published 2019-12-02 No fix listed CWE-306

Vulnerabilities

Filters

Anviz access control devices perform cleartext transmission of sensitive information…

Anviz access control devices expose credentials (names and passwords) by allowing remote…

Anviz access control devices expose private Information (pin code and name) by allowing…

Anviz access control devices allow remote attackers to issue commands without a password.