Vulnerabilities

TI-2019-09242 CVE-2019-12394 · GHSA-xhrm-c42h-gc35

Anviz access control devices allow unverified password change which allows remote…

MEDIUM 46

Anviz access control devices allow unverified password change which allows remote attackers to change the administrator password without prior authentication.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02099 Published 2019-12-02 No fix listed CWE-287

TI-2019-09239 CVE-2019-12391 · GHSA-fgxx-cm7r-ghp7

The Anviz Management System for access control has insufficient logging for device events such as door open requests.

LOW 35

The Anviz Management System for access control has insufficient logging for device events such as door open requests.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01127 Published 2019-12-02 No fix listed

TI-2019-09241 CVE-2019-12393 · GHSA-wv97-733g-f484

Anviz access control devices are vulnerable to replay attacks which could allow attackers…

LOW 35

Anviz access control devices are vulnerable to replay attacks which could allow attackers to intercept and replay open door requests.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01069 Published 2019-12-02 No fix listed CWE-294

Vulnerabilities

Filters

Anviz access control devices allow unverified password change which allows remote…

The Anviz Management System for access control has insufficient logging for device events such as door open requests.

Anviz access control devices are vulnerable to replay attacks which could allow attackers…