CVE-2019-12388 - Anviz access control devices perform cleartext transmission of sensitive information (passwords/pins and names) when replying to query on port tcp/5010

Back Back to CVE browser

HIGH

Anviz access control devices perform cleartext transmission of sensitive information (passwords/pins and names) when replying to query on port tcp/5010

Published Dec 2, 2019

7.5

HIGH

CVSS 3.1

EPSS 0.84%

Description

Anviz access control devices perform cleartext transmission of sensitive information (passwords/pins and names) when replying to query on port tcp/5010.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-319

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-4021
Advisory
https://www.0x90.zone/multiple/reverse/2019/11/28/Anviz-pwn.html
x_refsource_MISCThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-4021		Advisory
https://www.0x90.zone/multiple/reverse/2019/11/28/Anviz-pwn.html		x_refsource_MISCThird Party Advisory