Vulnerabilities > Honeywell > Notifier Webserver > 3.50

DATE CVE VULNERABILITY TITLE RISK
2020-04-07 CVE-2020-6974 Path Traversal vulnerability in Honeywell Notifier Webserver 3.50
Honeywell Notifier Web Server (NWS) Version 3.50 is vulnerable to a path traversal attack, which allows an attacker to bypass access to restricted directories.
network
low complexity
honeywell CWE-22
7.5
2020-03-24 CVE-2020-6972 Authentication Bypass by Capture-replay vulnerability in Honeywell Notifier Webserver 3.50
In Notifier Web Server (NWS) Version 3.50 and earlier, the Honeywell Fire Web Server’s authentication may be bypassed by a capture-replay attack from a web browser.
network
low complexity
honeywell CWE-294
6.4