CVE-2020-7005 - In Honeywell WIN-PAK 4.7.2, Web and prior versions, the affected product is vulnerable to a cross-site request forgery, which may allow an attacker to remotely execute arbitrary code

Back Back to CVE browser

HIGH

In Honeywell WIN-PAK 4.7.2, Web and prior versions, the affected product is vulnerable to a cross-site request forgery, which may allow an attacker to remotely execute arbitrary code

Published Mar 24, 2020

8.8

HIGH

CVSS 3.1

EPSS 0.92%

Description

In Honeywell WIN-PAK 4.7.2, Web and prior versions, the affected product is vulnerable to a cross-site request forgery, which may allow an attacker to remotely execute arbitrary code.

Affected products

Vendor n/a Product Honeywell WIN-PAK 4.7.2, Web and prior versions Default
unknown
Affected
- Honeywell WIN-PAK 4.7.2, Web and prior versions

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
n/a	Honeywell WIN-PAK 4.7.2, Web and prior versions	unknown	Affected Honeywell WIN-PAK 4.7.2, Web and prior versions

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-352

CSRF

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-28145
Advisory
https://www.us-cert.gov/ics/advisories/icsa-20-056-05
x_refsource_MISCThird Party AdvisoryUS Government Resource

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-28145		Advisory
https://www.us-cert.gov/ics/advisories/icsa-20-056-05		x_refsource_MISCThird Party AdvisoryUS Government Resource

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner icscert

Published Mar 24, 2020

Updated Aug 4, 2024

Reserved Jan 14, 2020

Link CVE-2020-7005

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-7005

Red Hat

No data

ENISA EUVD

Assigner icscert

Published Mar 24, 2020

Updated Aug 4, 2024

Link EUVD-2020-28145

GitHub

No data