← Back

Notifier Webserver

notifier_webserver

Vendor: Honeywell • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-6974
1Honeywell
1Notifier Webserver
Jun 17, 2026
Apr 7, 2020
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Honeywell Notifier Web Server (NWS) Version 3.50 is vulnerable to a path traversal attack, which allows an attacker to bypass access to restricted directories. Honeywell has released a firmware update to address the prob...Show more
Honeywell Notifier Web Server (NWS) Version 3.50 is vulnerable to a path traversal attack, which allows an attacker to bypass access to restricted directories. Honeywell has released a firmware update to address the problem.Show less
CVE-2020-6972
1Honeywell
1Notifier Webserver
Jun 17, 2026
Mar 24, 2020
N/A· v4
9.1 CRITICAL· v3
6.4 MEDIUM· v2
In Notifier Web Server (NWS) Version 3.50 and earlier, the Honeywell Fire Web Server’s authentication may be bypassed by a capture-replay attack from a web browser.