Anviz access control devices expose private Information (pin code and name) by allowing remote attackers to query this information without credentials via port tcp/5010.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NAnviz Firmware
OSAnvizall versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
Related vulnerabilities
CVE-2019-12392CRITICAL9.8PL ✓same product
Anviz Firmware — zdalne wykonanie poleceń bez uwierzytelnienia
CVE-2019-12388HIGH7.5same product
Anviz access control devices perform cleartext transmission of sensitive information (passwords/pins and names...
CVE-2019-12389HIGH7.5same product
Anviz access control devices expose credentials (names and passwords) by allowing remote attackers to query th...
CVE-2026-35546CRITICAL9.8PL ✓same vendor
Nieautoryzowane przesyłanie firmware w urządzeniach Anviz CX2 Lite i CX7
CVE-2019-12394CRITICAL9.8PL ✓same vendor
Anviz Access Control — zmiana hasła admina bez uwierzytelnienia