CVE-2020-6972

CVE-2020-6972 affects Honeywell/NWS Notifier Web Server (NWS-3) versions 3.50 and earlier. The vulnerability is an authentication bypass by a capture-replay attack from a web browser, with CVSS v3.1 base score 9.1 (Network, Privileges None, User Interaction None; Confidentiality/Integrity High, A...

CVE-2020-6974

The CVE-2020-6974 issue affects Honeywell Notifier Web Server (NWS) versions 3.50 and earlier, where a path traversal vulnerability can bypass access to restricted directories. Multiple sources corroborate the vulnerability and indicate a firmware update from Honeywell addresses the problem. CISA...