Security Advisory

CVE-2020-6972

9.1
CRITICAL

Vulnerability Description

In Notifier Web Server (NWS) Version 3.50 and earlier, the Honeywell Fire Web Server’s authentication may be bypassed by a capture-replay attack from a web browser.
Published Date March 24, 2020
Official Source NIST NVD Advisory