29 matches found
CVE-2020-6982
In Honeywell WIN-PAK 4.7.2, Web and prior versions, the header injection vulnerability has been identified, which may allow remote code execution...
CVE-2020-7005
Honeywell WIN-PAK 4.7.2 (Web and prior versions) is affected by CVE-2020-7005: a cross-site request forgery vulnerability that may allow remote code execution. Affected product: WIN-PAK, a monitoring system; vulnerable component: web interface handling CSRF. Impact: remote code execution with hig...
CVE-2020-7005
In Honeywell WIN-PAK 4.7.2, Web and prior versions, the affected product is vulnerable to a cross-site request forgery, which may allow an attacker to remotely execute arbitrary code...
CVE-2020-6982: Improper Neutralization of HTTP Headers for Scripting Syntax
In Honeywell WIN-PAK 4.7.2, Web and prior versions, the header injection vulnerability has been identified, which may allow remote code execution...
CVE-2020-6978: Use of Obsolete Function
In Honeywell WIN-PAK 4.7.2, Web and prior versions, the affected product is vulnerable due to the usage of old jQuery libraries...
CVE-2020-7005: Cross-Site Request Forgery (CSRF)
In Honeywell WIN-PAK 4.7.2, Web and prior versions, the affected product is vulnerable to a cross-site request forgery, which may allow an attacker to remotely execute arbitrary code...
Honeywell WIN-PAK HTTP Header Code Execution Vulnerability
Honeywell WIN-PAK is a Honeywell Management System Center software package. Honeywell WIN-PAK has an HTTP header code execution vulnerability that can be exploited by an attacker to remotely execute code...
Unspecified Vulnerability in Honeywell WIN-PAK
Honeywell WIN-PAK is a Honeywell Management System Center software package. Honeywell WIN-PAK has a security vulnerability that can be exploited by remote attackers to compromise the system...
Honeywell WIN-PAK Cross-Site Request Forgery Vulnerability
Honeywell WIN-PAK is a Honeywell Management System Center software package. Honeywell WIN-PAK suffers from a cross-site request forgery vulnerability that can be exploited by an attacker to execute arbitrary code...