ICSA-20-021-01_Honeywell Maxpro VMS & NVR
Joachim Kerschbaumer discovered these vulnerabilities; Honeywell reported these vulnerabilities to CISA.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-6960US | critical9.8 | — | ||
The following versions of MAXPRO VMS and NVR, MAXPRO VMS:HNMSWVMS prior to Version VMS560 Build 595 T2-Patch, HNMSWVMSLT prior to Version VMS560 Build 595 T2-Patch, MAXPRO NVR: MAX… | ||||
| CVE-2020-6959US | critical9.8 | — | ||
The following versions of MAXPRO VMS and NVR, MAXPRO VMS:HNMSWVMS prior to Version VMS560 Build 595 T2-Patch, HNMSWVMSLT prior to Version VMS560 Build 595 T2-Patch, MAXPRO NVR: MAX… | ||||
references
External citations — patches, advisories, analysis.
remediations (12)
- MitigationHNMSWVMS
As a best practice, Honeywell recommends users isolate their systems from the Internet or create additional layers of defense by placing the affected hardware behind a firewall or into a DMZ; and if remote connections to the network are required, consider using a VPN or other means to ensure secure remote connections into the network where the device is located.
- MitigationHNMSWVMS
As a best practice, Honeywell recommends users isolate their systems from the Internet or create additional layers of defense by placing the affected hardware behind a firewall or into a DMZ; and if remote connections to the network are required, consider using a VPN or other means to ensure secure remote connections into the network where the device is located.
- MitigationHNMSWVMSLT
As a best practice, Honeywell recommends users isolate their systems from the Internet or create additional layers of defense by placing the affected hardware behind a firewall or into a DMZ; and if remote connections to the network are required, consider using a VPN or other means to ensure secure remote connections into the network where the device is located.
- MitigationHNMSWVMSLT
As a best practice, Honeywell recommends users isolate their systems from the Internet or create additional layers of defense by placing the affected hardware behind a firewall or into a DMZ; and if remote connections to the network are required, consider using a VPN or other means to ensure secure remote connections into the network where the device is located.
- MitigationMAXPRO NVR PE
As a best practice, Honeywell recommends users isolate their systems from the Internet or create additional layers of defense by placing the affected hardware behind a firewall or into a DMZ; and if remote connections to the network are required, consider using a VPN or other means to ensure secure remote connections into the network where the device is located.
- MitigationMAXPRO NVR PE
As a best practice, Honeywell recommends users isolate their systems from the Internet or create additional layers of defense by placing the affected hardware behind a firewall or into a DMZ; and if remote connections to the network are required, consider using a VPN or other means to ensure secure remote connections into the network where the device is located.
- MitigationMAXPRO NVR SE
As a best practice, Honeywell recommends users isolate their systems from the Internet or create additional layers of defense by placing the affected hardware behind a firewall or into a DMZ; and if remote connections to the network are required, consider using a VPN or other means to ensure secure remote connections into the network where the device is located.
- MitigationMAXPRO NVR SE
As a best practice, Honeywell recommends users isolate their systems from the Internet or create additional layers of defense by placing the affected hardware behind a firewall or into a DMZ; and if remote connections to the network are required, consider using a VPN or other means to ensure secure remote connections into the network where the device is located.
- MitigationMAXPRO NVR XE
As a best practice, Honeywell recommends users isolate their systems from the Internet or create additional layers of defense by placing the affected hardware behind a firewall or into a DMZ; and if remote connections to the network are required, consider using a VPN or other means to ensure secure remote connections into the network where the device is located.
- MitigationMAXPRO NVR XE
As a best practice, Honeywell recommends users isolate their systems from the Internet or create additional layers of defense by placing the affected hardware behind a firewall or into a DMZ; and if remote connections to the network are required, consider using a VPN or other means to ensure secure remote connections into the network where the device is located.
- MitigationMPNVRSWXX
As a best practice, Honeywell recommends users isolate their systems from the Internet or create additional layers of defense by placing the affected hardware behind a firewall or into a DMZ; and if remote connections to the network are required, consider using a VPN or other means to ensure secure remote connections into the network where the device is located.
- MitigationMPNVRSWXX
As a best practice, Honeywell recommends users isolate their systems from the Internet or create additional layers of defense by placing the affected hardware behind a firewall or into a DMZ; and if remote connections to the network are required, consider using a VPN or other means to ensure secure remote connections into the network where the device is located.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan