CVE-2020-6972

Critical

In Notifier Web Server (NWS) Version 3.50 and earlier, the Honeywell Fire Web Server’s authentication may be bypassed by a capture-replay…

icscert·CWE-294·Published 2020-03-24

CVSS

9.1

EPSS

0.01

KEV

Exploits

cve.orgen

164 chars

In Notifier Web Server (NWS) Version 3.50 and earlier, the Honeywell Fire Web Server’s authentication may be bypassed by a capture-replay attack from a web browser.

NVDen

164 chars

In Notifier Web Server (NWS) Version 3.50 and earlier, the Honeywell Fire Web Server’s authentication may be bypassed by a capture-replay attack from a web browser.

En Notifier Web Server (NWS) versiones 3.50 y anteriores, la autenticación del Honeywell Fire Web Server puede ser omitida por un ataque de reproducción de captura desde un navegador web.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	6.4	10.0	4.9	AV:N/AC:L/Au:N/C:P/I:P/A:N
3.1	Primary	NVD	9.1	3.9	5.2	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N