access control devices
by Anviz
CVEs (2)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2019-12388 | 0.00 | — | 0.01 | Dec 2, 2019 | Anviz access control devices perform cleartext transmission of sensitive information (passwords/pins and names) when replying to query on port tcp/5010. | |||
| CVE-2019-12394 | 0.00 | — | 0.02 | Dec 2, 2019 | Anviz access control devices allow unverified password change which allows remote attackers to change the administrator password without prior authentication. |
- CVE-2019-12388Dec 2, 2019risk 0.00cvss —epss 0.01
Anviz access control devices perform cleartext transmission of sensitive information (passwords/pins and names) when replying to query on port tcp/5010.
- CVE-2019-12394Dec 2, 2019risk 0.00cvss —epss 0.02
Anviz access control devices allow unverified password change which allows remote attackers to change the administrator password without prior authentication.