CVE-2020-6982

In Honeywell WIN-PAK 4.7.2, Web and prior versions, the header injection vulnerability has been identified, which may allow remote code execution...

CVE-2020-6982

CVE-2020-6982 is a header-injection vulnerability in Honeywell WIN-PAK 4.7.2 (Web and prior). The root cause is improper handling of HTTP headers enabling remote code execution with no authentication and no user interaction required (CVSS v3.1: 8.8, AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Affected ...