Honeywell WIN-PAK
Successful exploitation of these vulnerabilities allows an attacker to perform remote code execution.
beschreibt (3)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2020-6982US | high8.8 | — | ||
In Honeywell WIN-PAK 4.7.2, Web and prior versions, the header injection vulnerability has been identified, which may allow remote code execution. | ||||
| CVE-2020-6978US | high7.2 | — | ||
In Honeywell WIN-PAK 4.7.2, Web and prior versions, the affected product is vulnerable due to the usage of old jQuery libraries. | ||||
| CVE-2020-7005US | high8.8 | — | ||
In Honeywell WIN-PAK 4.7.2, Web and prior versions, the affected product is vulnerable to a cross-site request forgery, which may allow an attacker to remotely execute arbitrary co… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (6)
- MitigationWIN-PAK
As a best practice, Honeywell recommends users isolate systems from the Internet or create additional layers of defense to their system from the Internet by placing the affected hardware behind a firewall or into a DMZ.
- MitigationWIN-PAK
As a best practice, Honeywell recommends users isolate systems from the Internet or create additional layers of defense to their system from the Internet by placing the affected hardware behind a firewall or into a DMZ.
- MitigationWIN-PAK
As a best practice, Honeywell recommends users isolate systems from the Internet or create additional layers of defense to their system from the Internet by placing the affected hardware behind a firewall or into a DMZ.
- BehobenWIN-PAK
Update WIN-PAK to latest version, WIN-PAK 4.7.2 B1072.3.4, before applying the patch, which is available on the Honeywell Mywebtech portal.
https://mywebtech.honeywell.com/Systems/Home - BehobenWIN-PAK
Update WIN-PAK to latest version, WIN-PAK 4.7.2 B1072.3.4, before applying the patch, which is available on the Honeywell Mywebtech portal.
https://mywebtech.honeywell.com/Systems/Home - BehobenWIN-PAK
Update WIN-PAK to latest version, WIN-PAK 4.7.2 B1072.3.4, before applying the patch, which is available on the Honeywell Mywebtech portal.
https://mywebtech.honeywell.com/Systems/Home
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan