CVE-2020-6972
9.1CRITICALIn Notifier Web Server (NWS) Version 3.50 and earlier, the Honeywell Fire Web Server’s authentication may be bypassed by a capture-replay attack from a web browser.
Published: 3/24/2020Updated: 11/21/2024
Description
In Notifier Web Server (NWS) Version 3.50 and earlier, the Honeywell Fire Web Server’s authentication may be bypassed by a capture-replay attack from a web browser.
AI AnalysisPowered by AI
Affected Products
honeywellnotifier_webserver
References
- https://www.us-cert.gov/ics/advisories/icsa-20-051-03Third Party AdvisoryUS Government Resource
- https://www.us-cert.gov/ics/advisories/icsa-20-051-03Third Party AdvisoryUS Government Resource