Anviz Anviz Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Anviz Anviz Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2019-12392 — CVSS 9.8 (critical): Anviz access control devices allow remote attackers to issue commands without a password.
• CVE-2019-12388 — CVSS 7.5 (high): Anviz access control devices perform cleartext transmission of sensitive information (passwords/pins and names) when replying to query on…
• CVE-2019-12389 — CVSS 7.5 (high): Anviz access control devices expose credentials (names and passwords) by allowing remote attackers to query this information without…
• CVE-2019-12390 — CVSS 5.3 (medium): Anviz access control devices expose private Information (pin code and name) by allowing remote attackers to query this information without…