CVE-2020-6959 Deserialization in Honeywell Maxpro VMS & NVR
Remote attackers can achieve code execution via unsafe deserialization in Honeywell MAXPRO VMS and NVR without authentication.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-6959?
CVE-2020-6959 is a critical unsafe deserialization vulnerability in Honeywell Maxpro VMS & NVR, published on 22 Jan 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The following versions of MAXPRO VMS and NVR, MAXPRO VMS:HNMSWVMS prior to Version VMS560 Build 595 T2-Patch, HNMSWVMSLT prior to Version VMS560 Build 595 T2-Patch, MAXPRO NVR: MAXPRO NVR XE prior to Version NVR 5.6 Build 595 T2-Patch, MAXPRO NVR SE prior to Version NVR 5.6 Build 595 T2-Patch, MAXPRO NVR PE prior to Version NVR 5.6 Build 595 T2-Patch, and MPNVRSWXX prior to Version NVR 5.6 Build 595 T2-Patch are vulnerable to an unsafe deserialization of untrusted data. An attacker may be able to remotely modify deserialized data without authentication using a specially crafted web request, resulting in remote code execution.
Weakness: CWE-502
Which versions are affected by CVE-2020-6959?
It affects 6 products.
Products include Honeywell Hnmswvms Firmware, Honeywell Hnmswvmslt Firmware, Honeywell Maxpro Nvr Pe Firmware, Honeywell Maxpro Nvr Se Firmware, Honeywell Maxpro Nvr Xe Firmware, Honeywell Mpnvrswxx Firmware.
How do I fix CVE-2020-6959?
No fix has been published for CVE-2020-6959 yet. Limit exposure of the affected software until one is available.
Upgrade, and only deserialise data from trusted sources or with an allow-list of types. More about Unsafe deserialization.
Is CVE-2020-6959 being exploited?
There is no known exploitation of CVE-2020-6959 in the wild and no public exploit code.
Other vulnerabilities in Honeywell Maxpro VMS & NVR
Sources
Also known as GHSA-3478-j759-vphx.