High

DATE	CVE	VULNERABILITY TITLE	RISK
2019-12-02	CVE-2019-12389	Missing Authentication for Critical Function vulnerability in Anviz Firmware Anviz access control devices expose credentials (names and passwords) by allowing remote attackers to query this information without credentials via port tcp/5010. network low complexity anviz CWE-306	7.5
2019-12-02	CVE-2019-12388	Cleartext Transmission of Sensitive Information vulnerability in Anviz Firmware Anviz access control devices perform cleartext transmission of sensitive information (passwords/pins and names) when replying to query on port tcp/5010. network low complexity anviz CWE-319	7.5