Authentication flaw

2020-03-2417:15:00

PRIOn knowledge base

www.prio-n.com

9.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.5%

JSON

In Notifier Web Server (NWS) Version 3.50 and earlier, the Honeywell Fire Web Server’s authentication may be bypassed by a capture-replay attack from a web browser.

CPENameOperatorVersion
notifier_webserverle3.50

CPE	Name	Operator	Version
	notifier_webserver	le	3.50

References

www.us-cert.gov/ics/advisories/icsa-20-051-03