Unscored CVE-2019-12394 EUVD-2019-4027GHSA-xhrm-c42h-gc35

Anviz access control devices allow unverified password change which allows remote attackers to change the administrator password without pr…

Published Dec 2, 2019 · Updated Aug 4, 2024 · Assigned by mitre

Description

Anviz access control devices allow unverified password change which allows remote attackers to change the administrator password without prior authentication.

References

https://www.0x90.zone/multiple/reverse/2019/11/28/Anviz-pwn.html