CVE-2019-12389

Anviz access control devices expose credentials names and passwords by allowing remote attackers to query this information without credentials via port tcp/5010...

CVE-2019-12389

CVE-2019-12389 affects Anviz access control devices. The root cause is credential exposure: remote attackers can query usernames and passwords without authentication via TCP port 5010. This leads to a confidentiality impact (high per CVSS3.1, but evidence in documents notes credential disclosure ...