Header Injection Vulnerability in Honeywell WIN-PAK 4.7.2 and Earlier
CVE-2020-6982

8.8HIGH

Key Information:

Vendor

Honeywell

Status
Honeywell Win-pak 4.7.2, Web And Prior Versions
Vendor
CVE Published:
24 March 2020

What is CVE-2020-6982?

A header injection vulnerability has been discovered in Honeywell WIN-PAK 4.7.2 and earlier versions. This flaw could potentially be exploited by an attacker to execute remote code, compromising the integrity and security of the system. Organizations using these versions should take precautionary measures to mitigate the risks associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Honeywell WIN-PAK 4.7.2, Web and prior Honeywell WIN-PAK 4.7.2, Web and prior versions

References

https://www.us-cert.gov/ics/advisories/icsa-20-056-05
x_refsource_MISC

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.