CVE-2019-12394

Anviz access control devices allow unverified password change which allows remote attackers to change the administrator password without prior authentication.

Date published : 2019-12-02

https://www.0x90.zone/multiple/reverse/2019/11/28/Anviz-pwn.html