CVE-2020-6972
9.1CRITICALIn Notifier Web Server (NWS) Version 3.50 and earlier, the Honeywell Fire Web Server’s authentication may be bypassed by a capture-replay attack from a web browser.
Publicado: 3/24/2020Actualizado: 11/21/2024
Descripción
In Notifier Web Server (NWS) Version 3.50 and earlier, the Honeywell Fire Web Server’s authentication may be bypassed by a capture-replay attack from a web browser.
Análisis IAImpulsado por IA
Productos Afectados
honeywellnotifier_webserver
Referencias
- https://www.us-cert.gov/ics/advisories/icsa-20-051-03Third Party AdvisoryUS Government Resource
- https://www.us-cert.gov/ics/advisories/icsa-20-051-03Third Party AdvisoryUS Government Resource