EUVD-2019-4022

Malware in sbrugna...

EUVD-2019-4023

Malware in sbrugna...

CVE-2023-28810

Some access control/intercom products have unauthorized modification of device network configuration vulnerabilities. Attackers can modify device network configuration by sending specific data packets to the vulnerable interface within the same local network...

PT-2019-12776

Name of the Vulnerable Software and Affected Versions Anviz access control devices affected versions not specified Description The issue concerns the cleartext transmission of sensitive information, including passwords, pins, and names, when Anviz access control devices respond to queries on port...

PT-2019-12777

Name of the Vulnerable Software and Affected Versions Anviz access control devices affected versions not specified Description The issue allows remote attackers to query credential information, including names and passwords, without credentials via port tcp/5010. Recommendations At the moment,...

PT-2019-12778

Name of the Vulnerable Software and Affected Versions Anviz access control devices affected versions not specified Description The issue allows remote attackers to query private information, including pin codes and names, without credentials via port tcp/5010. Recommendations At the moment, there...

PT-2019-12780

Name of the Vulnerable Software and Affected Versions Anviz access control devices affected versions not specified Description The issue allows remote attackers to issue commands without a password. Recommendations At the moment, there is no information about a newer version that contains a fix f...

PT-2019-12781

Name of the Vulnerable Software and Affected Versions Anviz access control devices affected versions not specified Description The issue concerns replay attacks that could allow attackers to intercept and replay open door requests. This could potentially compromise the security of the access...

PT-2019-12782

Name of the Vulnerable Software and Affected Versions Anviz access control devices affected versions not specified Description The issue allows remote attackers to change the administrator password without prior authentication, due to the lack of verification for password changes. This enables...

CVE-2019-12388: Cleartext Transmission of Sensitive Information

Anviz access control devices perform cleartext transmission of sensitive information passwords/pins and names when replying to query on port tcp/5010...

CVE-2019-12390: Missing Authentication for Critical Function

Anviz access control devices expose private Information pin code and name by allowing remote attackers to query this information without credentials via port tcp/5010...

CVE-2019-12389: Missing Authentication for Critical Function

Anviz access control devices expose credentials names and passwords by allowing remote attackers to query this information without credentials via port tcp/5010...

CVE-2019-12394: Improper Authentication

Anviz access control devices allow unverified password change which allows remote attackers to change the administrator password without prior authentication...

CVE-2019-12392: Missing Authentication for Critical Function

Anviz access control devices allow remote attackers to issue commands without a password...

CVE-2019-12393: Authentication Bypass by Capture-replay

Anviz access control devices are vulnerable to replay attacks which could allow attackers to intercept and replay open door requests...

CVE-2018-19588

Alarm.com ADC-V522IR 0100b9 devices have Incorrect Access Control...

CVE-2018-19588

Alarm.com ADC-V522IR 0100b9 devices have Incorrect Access Control...

HID VertX Detection (discoveryd)

Detection of HID VertX Access Control Devices. The script sends a connection request to the server and attempts to detect HID VertX Access Control Devices and to extract its version. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and...

CVE-2015-2870

Cross-site scripting XSS vulnerability on Chiyu BF-630, BF-630W, and BF-660C fingerprint access-control devices allows remote attackers to inject arbitrary web script or HTML via a SCRIPT element...

CVE-2015-2870

CVE-2015-2870 affects Chiyu BF-630, BF-630W and BF-660C fingerprint access-control devices. The vulnerability is a cross-site scripting (XSS) flaw that lets remote attackers inject arbitrary web script or HTML via a SCRIPT element, typically through a URL passed to the device. The related CERT/CC...