CVE-2020-6972
9.1CRITICALIn Notifier Web Server (NWS) Version 3.50 and earlier, the Honeywell Fire Web Server’s authentication may be bypassed by a capture-replay attack from a web browser.
Опубликовано: 3/24/2020Обновлено: 11/21/2024
Описание
In Notifier Web Server (NWS) Version 3.50 and earlier, the Honeywell Fire Web Server’s authentication may be bypassed by a capture-replay attack from a web browser.
ИИ-АнализНа базе ИИ
Затронутые продукты
honeywellnotifier_webserver
Ссылки
- https://www.us-cert.gov/ics/advisories/icsa-20-051-03Third Party AdvisoryUS Government Resource
- https://www.us-cert.gov/ics/advisories/icsa-20-051-03Third Party AdvisoryUS Government Resource