Header Injection Vulnerability in Honeywell WIN-PAK 4.7.2 and Earlier
CVE-2020-6982

8.8HIGH

Key Information:

Vendor

Honeywell

Status
Honeywell Win-pak 4.7.2, Web And Prior Versions
Vendor
CVE Published:
24 March 2020

What is CVE-2020-6982?

A header injection vulnerability has been discovered in Honeywell WIN-PAK 4.7.2 and earlier versions. This flaw could potentially be exploited by an attacker to execute remote code, compromising the integrity and security of the system. Organizations using these versions should take precautionary measures to mitigate the risks associated with this vulnerability.

Affected Version(s)

Honeywell WIN-PAK 4.7.2, Web and prior Honeywell WIN-PAK 4.7.2, Web and prior versions

References

https://www.us-cert.gov/ics/advisories/icsa-20-056-05
x_refsource_MISC

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.