CVE-2020-7005

Honeywell WIN-PAK 4.7.2 (Web and prior versions) is affected by CVE-2020-7005: a cross-site request forgery vulnerability that may allow remote code execution. Affected product: WIN-PAK, a monitoring system; vulnerable component: web interface handling CSRF. Impact: remote code execution with hig...

Honeywell WIN-PAK Cross-Site Request Forgery Vulnerability

Honeywell WIN-PAK is a Honeywell Management System Center software package. Honeywell WIN-PAK suffers from a cross-site request forgery vulnerability that can be exploited by an attacker to execute arbitrary code...

Honeywell WIN-PAK HTTP Header Code Execution Vulnerability

Honeywell WIN-PAK is a Honeywell Management System Center software package. Honeywell WIN-PAK has an HTTP header code execution vulnerability that can be exploited by an attacker to remotely execute code...

Unspecified Vulnerability in Honeywell WIN-PAK

Honeywell WIN-PAK is a Honeywell Management System Center software package. Honeywell WIN-PAK has a security vulnerability that can be exploited by remote attackers to compromise the system...