Description
Honeywell Notifier Web Server (NWS) Version 3.50 is vulnerable to a path traversal attack, which allows an attacker to bypass access to restricted directories. Honeywell has released a firmware update to address the problem.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Honeywell Notifier Web Server (NWS) | Version 3.50 and earlier | — |
Advisories 1
- ICSA-20-051-03 Honeywell NOTI-FIRE-NET Web Server (NWS-3) CISA ICS & IT advisories · Feb 20, 2020