CVE-2020-6972
9.1CRITICALIn Notifier Web Server (NWS) Version 3.50 and earlier, the Honeywell Fire Web Server’s authentication may be bypassed by a capture-replay attack from a web browser.
Veröffentlicht: 3/24/2020Aktualisiert: 11/21/2024
Beschreibung
In Notifier Web Server (NWS) Version 3.50 and earlier, the Honeywell Fire Web Server’s authentication may be bypassed by a capture-replay attack from a web browser.
KI-AnalyseKI-gestützt
Betroffene Produkte
honeywellnotifier_webserver
Referenzen
- https://www.us-cert.gov/ics/advisories/icsa-20-051-03Third Party AdvisoryUS Government Resource
- https://www.us-cert.gov/ics/advisories/icsa-20-051-03Third Party AdvisoryUS Government Resource