CVE-2019-12518: Anviz CrossChex access control software buffer overflow

Automated analysis

Generated by VULONE's analysis model from the NVD record, CISA KEV and EPSS data on 20 September 2026. Confidence: medium.

critical priorityCVSS 9.8 with network reachability, no authentication, no user interaction, and a public exploit write-up make this a critical exposure for any internet-facing or broadly reachable CrossChex deployment.

What it is

Anviz CrossChex access control management software versions 4.3.8.0 and 4.3.12 contain a classic buffer overflow (CWE-120). The flaw is remotely reachable with no authentication or user interaction, and a public exploit write-up exists, so it is a serious risk for exposed installations.

Impact

A successful exploit can corrupt memory and potentially allow remote code execution or a denial of service. Given the CVSS impact ratings, an attacker could gain high confidentiality, integrity, and availability impact on the affected host.

Attack surface

The CVSS vector is network-based (AV:N) with no privileges (PR:N) and no user interaction (UI:N), so the vulnerable service is reachable directly over the network. No authentication is required to trigger the overflow.

Exploitation

CISA KEV does not list this CVE, but EPSS is high (0.50738, 98.9th percentile) and a public exploit write-up is referenced, indicating active interest and available exploit code.

What to do

• Patch or upgrade Anviz CrossChex to a version later than 4.3.12 if the vendor provides one; if no fixed version exists, isolate the software.
• Restrict network access to the CrossChex management service using firewall rules or network segmentation so only trusted management hosts can reach it.
• Disable or remove the vulnerable service if it is not required for operations.
• Monitor vendor advisories for a fixed release and apply it as soon as available.
• If the software must remain exposed, place it behind a VPN or authenticated reverse proxy.

Detection

• Monitor network traffic to the CrossChex service port for unusually large or malformed payloads that could indicate overflow attempts.
• Check host logs and process behavior for crashes, restarts, or unexpected child processes from the CrossChex service.
• Use IDS/IPS signatures for known Anviz CrossChex buffer overflow exploit patterns if available.
• Audit exposed instances of CrossChex on the network and verify they are not directly reachable from untrusted networks.

This assessment is produced automatically and is not human-reviewed. Verify against the vendor advisory before acting on it.