CVE-2019-12394

9.8 criticalEPSS 2.1%

Critical (9.8) in anviz management system. EPSS 2.1% chance of exploitation in the next 30 days.

Anviz access control devices allow unverified password change which allows remote attackers to change the administrator password without prior authentication.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 2.1% chance of exploitation in the next 30 days; higher than 81% of CVEs (scores of 2026-10-31)
CWE: CWE-287
Published: 2019-12-02
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

anviz:management_system

References

https://www.0x90.zone/multiple/reverse/2019/11/28/Anviz-pwn.html
https://www.0x90.zone/multiple/reverse/2019/11/28/Anviz-pwn.html

Check your stack JSON