CVE-2019-12390

2019-12-0216:35:28

mitre

www.cve.org

AI Score

5.5

Confidence

High

EPSS

0.002

Percentile

52.9%

JSON

Anviz access control devices expose private Information (pin code and name) by allowing remote attackers to query this information without credentials via port tcp/5010.

References

www.0x90.zone/multiple/reverse/2019/11/28/Anviz-pwn.html