Critical

DATE	CVE	VULNERABILITY TITLE	RISK
2020-04-07	CVE-2020-6974	Path Traversal vulnerability in Honeywell Notifier Webserver 3.50 Honeywell Notifier Web Server (NWS) Version 3.50 is vulnerable to a path traversal attack, which allows an attacker to bypass access to restricted directories. network low complexity honeywell CWE-22 critical	9.8
2020-03-24	CVE-2020-6972	Authentication Bypass by Capture-replay vulnerability in Honeywell Notifier Webserver 3.50 In Notifier Web Server (NWS) Version 3.50 and earlier, the Honeywell Fire Web Server’s authentication may be bypassed by a capture-replay attack from a web browser. network low complexity honeywell CWE-294 critical	9.1