CVE-2020-6982

HIGH

Honeywell WIN-PAK < 4.7.2 - Remote Code Execution via HTTP Header Injection

Title source: llm
STIX 2.1

Description

In Honeywell WIN-PAK 4.7.2, Web and prior versions, the header injection vulnerability has been identified, which may allow remote code execution.

References (1)

Core 1
Core References
Third Party Advisory, US Government Resource x_refsource_misc
https://www.us-cert.gov/ics/advisories/icsa-20-056-05

Scores

CVSS v3 8.8
EPSS 0.0107
EPSS Percentile 60.8%
Attack Vector ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-644 CWE-74
Status published
Products (1)
honeywell/win-pak < 4.7.2
Published Mar 24, 2020
Tracked Since Feb 18, 2026