CVE-2020-6974: Improper Limitation of a Pathname to a Restricted Directory

Honeywell Notifier Web Server NWS Version 3.50 is vulnerable to a path traversal attack, which allows an attacker to bypass access to restricted directories. Honeywell has released a firmware update to address the problem...

PT-2020-19322

Name of the Vulnerable Software and Affected Versions Honeywell Notifier Web Server NWS version 3.50 Description The issue allows an attacker to bypass access to restricted directories through a path traversal attack. Honeywell has released a firmware update to address the problem. Recommendation...

PT-2020-19320

Name of the Vulnerable Software and Affected Versions Notifier Web Server NWS versions 3.50 and earlier Description The issue allows the Honeywell Fire Web Server’s authentication to be bypassed by a capture-replay attack from a web browser. Recommendations For Notifier Web Server NWS versions 3....