CVE-2019-12394

2019-12-0216:29:20

mitre

www.cve.org

9.6 High

AI Score

Confidence

High

0.02 Low

EPSS

Percentile

88.9%

JSON

Anviz access control devices allow unverified password change which allows remote attackers to change the administrator password without prior authentication.

References

www.0x90.zone/multiple/reverse/2019/11/28/Anviz-pwn.html