CVE-2019-12389

2019-12-0216:37:48

mitre

www.cve.org

AI Score

7.6

Confidence

High

EPSS

0.007

Percentile

80.1%

JSON

Anviz access control devices expose credentials (names and passwords) by allowing remote attackers to query this information without credentials via port tcp/5010.

References

www.0x90.zone/multiple/reverse/2019/11/28/Anviz-pwn.html