VYPR
← All advisories
Critical severity9.1NVD Advisory· Published Mar 24, 2020· Updated Jun 17, 2026

CVE-2020-6972

CVE-2020-6972

Description

In Notifier Web Server (NWS) Version 3.50 and earlier, the Honeywell Fire Web Server’s authentication may be bypassed by a capture-replay attack from a web browser.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Honeywell/Notifier Webserverllm-fuzzy2 versions
    <=3.50+ 1 more
    • (no CPE)range: <=3.50
    • cpe:2.3:a:honeywell:notifier_webserver:*:*:*:*:*:*:*:*range: <=3.50
  • Honeywell/Notifier Web Server (NWS) Version 3.50 and earlierv5
    Range: Notifier Web Server (NWS) Version 3.50 and earlier
  • Honeywell/Fire Web Serverllm-fuzzy
    Range: <=3.50

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.