AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2019-11523

CRITICAL · CVSS 9.8 EPSS 1.21% Public Exploit

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2019-06-06 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links
github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2019-11523
Severity
CRITICAL
CVSS
9.8
EPSS
1.21%

Original NVD Description

Anviz Global M3 Outdoor RFID Access Control executes any command received from any source. No authentication/encryption is done. Attackers can fully interact with the device: for example, send the "open door" command, download the users list (which includes RFID codes and passcodes in cleartext), or update/create users. The same attack can be executed on a local network and over the internet (if the device is exposed on a public IP address).