Описание
Anviz access control devices expose credentials (names and passwords) by allowing remote attackers to query this information without credentials via port tcp/5010.
Ссылки
- Third Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:o:anviz:anviz_firmware:-:*:*:*:*:*:*:*
EPSS
Процентиль: 67%
0.00542
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-306
Связанные уязвимости
github
больше 3 лет назад
Anviz access control devices expose credentials (names and passwords) by allowing remote attackers to query this information without credentials via port tcp/5010.
EPSS
Процентиль: 67%
0.00542
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-306