Description (CNA)
In Notifier Web Server (NWS) Version 3.50 and earlier, the Honeywell Fire Web Server’s authentication may be bypassed by a capture-replay attack from a web browser.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Honeywell / Notifier Web Server (NWS) Version 3.50 and earlier | affected Notifier Web Server (NWS) Version 3.50 and earlier |
CWE
CWE-294
References
ADP enrichment
No English description supplied.