Approved changes feed: RSS · Atom

cpe:2.3:a:honeywell:notifier_webserver:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorHoneywell (98681534-528d-57d2-bf2a-17f1d63c09c9)
ProductNotifier Webserver (c9d74ba1-6466-56a4-bc8a-b9eb4c357c99)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-6974 vulnerable 2026-06-08 05:27:11.378687 Details available
Honeywell Notifier Web Server (NWS) Version 3.50 is vulnerable to a path traversal attack, which allows an attacker to bypass access to restricted directories. Honeywell has released a firmware update to address the problem.
Published: 2020-04-07T17:06:02.000Z
Updated: 2024-08-04T09:18:02.542Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6972 vulnerable 2026-06-08 05:27:11.373672 Details available
In Notifier Web Server (NWS) Version 3.50 and earlier, the Honeywell Fire Web Server’s authentication may be bypassed by a capture-replay attack from a web browser.
Published: 2020-03-24T16:38:57.000Z
Updated: 2024-08-04T09:18:02.247Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.