Vulnerabilities > Anviz > Critical

DATE CVE VULNERABILITY TITLE RISK
2019-12-02 CVE-2019-12518 Classic Buffer Overflow vulnerability in Anviz Crosschex 4.3.12/4.3.8.0
Anviz CrossChex access control management software 4.3.8.0 and 4.3.12 is vulnerable to a buffer overflow vulnerability.
network
low complexity
anviz CWE-120
critical
9.8
2019-12-02 CVE-2019-12394 Improper Authentication vulnerability in Anviz Management System
Anviz access control devices allow unverified password change which allows remote attackers to change the administrator password without prior authentication.
network
low complexity
anviz CWE-287
critical
9.8
2019-12-02 CVE-2019-12392 Missing Authentication for Critical Function vulnerability in Anviz Firmware
Anviz access control devices allow remote attackers to issue commands without a password.
network
low complexity
anviz CWE-306
critical
9.8
2019-06-06 CVE-2019-11523 Missing Encryption of Sensitive Data vulnerability in Anviz M3 Firmware
Anviz Global M3 Outdoor RFID Access Control executes any command received from any source.
network
low complexity
anviz CWE-311
critical
9.8