Skip to content
OpenAdvisories
Unscored CVE-2020-6972 EUVD-2020-28112GHSA-4pww-fgmg-2g7r

In Notifier Web Server (NWS) Version 3.50 and earlier, the Honeywell Fire Web Server’s authentication may be bypassed by a capture-replay a…

Published Mar 24, 2020 · Updated Aug 4, 2024 · Assigned by icscert

Vendor: Honeywell Product: Notifier Web Server (NWS) Version 3.50 and earlier Category: ICS / OT

Description

In Notifier Web Server (NWS) Version 3.50 and earlier, the Honeywell Fire Web Server’s authentication may be bypassed by a capture-replay attack from a web browser.

Affected products

VendorProductAffectedFixed
Honeywell Notifier Web Server (NWS) Version 3.50 and earlier Notifier Web Server (NWS) Version 3.50 and earlier —

Advisories 1

References