CVE-2020-6972 - AskarLabs CVE Database

CVE-2020-6972

Vendor Honeywell

Product Notifier Web Server (NWS) Version 3.50 and earlier

Weakness CWE-294

Published March 24, 2020

Last update August 4, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

In Notifier Web Server (NWS) Version 3.50 and earlier, the Honeywell Fire Web Server’s authentication may be bypassed by a capture-replay attack from a web browser.

Key dates

02Disclosure timeline

March 24, 2020 CVE published

August 4, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2020-6972 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/294.html

Related vulnerabilities

04Related CVE

CVE-2026-41000 WSS4J validation does not use configured replay cache CVE-2026-41351 OpenClaw < 2026.3.31 - Webhook Replay Detection Bypass via Base64 Signature Re-encoding CVE-2025-8616 Malicious browser plugins may cause Authentication replay attack vulnerability to bypass authentication in OpenText Advanced Authentication CVE-2023-6374 CVE-2026-46538 Microsoft UFO accepts cross-device TASK_END messages by session_id only, allowing peer task-result injection