high8.8
CVE-2020-7005
In Honeywell WIN-PAK 4.7.2, Web and prior versions, the affected product is vulnerable to a cross-site request forgery, which may allow an attacker to remotely…
Impact
In Honeywell WIN-PAK 4.7.2, Web and prior versions, the affected product is vulnerable to a cross-site request forgery, which may allow an attacker to remotely execute arbitrary code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Honeywell | Win-Pak | before 4.7.2_b1072.3.4 |