CVE-2019-12394: Anviz Management System

Critical severity, CVSS 9.8. EPSS: 2.1% chance of exploitation in the next 30 days.

Anviz access control devices allow unverified password change which allows remote attackers to change the administrator password without prior authentication.

Affected products

• Anviz Management System: affected versions not specified

Published 2019-12-02. Last modified 2026-06-17.