CVE-2020-6974CWE-22

CVE-2020-6974: vulnerability in Honeywell Notifier Web Server (NWS)

Published · Updated

Follow this CVE+ Monitor Notifier Web Server

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.9%
Honeywell Notifier Web Server (NWS) Version 3.50 is vulnerable to a path traversal attack, which allows an attacker to bypass access to restricted directories. Honeywell has released a firmware update to address the problem.
Affected products
n/a · Honeywell Notifier Web Server (NWS)