Critical severity9.8NVD Advisory· Published Jan 22, 2020· Updated Jun 17, 2026
CVE-2020-6959
CVE-2020-6959
Description
The following versions of MAXPRO VMS and NVR, MAXPRO VMS:HNMSWVMS prior to Version VMS560 Build 595 T2-Patch, HNMSWVMSLT prior to Version VMS560 Build 595 T2-Patch, MAXPRO NVR: MAXPRO NVR XE prior to Version NVR 5.6 Build 595 T2-Patch, MAXPRO NVR SE prior to Version NVR 5.6 Build 595 T2-Patch, MAXPRO NVR PE prior to Version NVR 5.6 Build 595 T2-Patch, and MPNVRSWXX prior to Version NVR 5.6 Build 595 T2-Patch are vulnerable to an unsafe deserialization of untrusted data. An attacker may be able to remotely modify deserialized data without authentication using a specially crafted web request, resulting in remote code execution.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
8- MAXPRO/MAXPRO VMS and NVRdescription
- Range: < VMS560 Build 595 T2-Patch
- cpe:2.3:o:honeywell:maxpro_nvr_xe_firmware:*:*:*:*:*:*:*:*Range: <=5.6
- cpe:2.3:o:honeywell:maxpro_nvr_se_firmware:*:*:*:*:*:*:*:*Range: <=5.6
- cpe:2.3:o:honeywell:maxpro_nvr_pe_firmware:*:*:*:*:*:*:*:*Range: <=5.6
Patches
Vulnerability mechanics
References
1- www.us-cert.gov/ics/advisories/icsa-20-021-01nvdThird Party AdvisoryUS Government Resource
News mentions
0No linked articles in our index yet.