CVE:CVE-2020-6959
CNNVD:CNNVD-202001-962
Honeywell software是美国霍尼韦尔（Honeywell）公司的一款应用软件。
多款Honeywell产品存在代码问题漏洞。远程攻击者可通过发送特制的请求利用该漏洞未经身份验证修改反序列化的数据，进而执行代码。以下产品及版本受到影响：HNMSWVMS VMS560 Build 595 T2-Patch之前版本，HNMSWVMSLT VMS560 Build 595 T2-Patch之前版本；MAXPRO NVR XE NVR 5.6 Build 595 T2-Patch之前版本，MAXPRO NVR SE NVR 5.6 Build 595 T2-Patch之前版本，MAXPRO NVR PE NVR 5.6 Build 595 T2-Patch之前版本，MPNVRSWXX NVR 5.6 Build 595 T2-Patch之前版本。
solution:Upgrade honeywell maxpro_nvr_xe_firmware to a higher version than 5.6,and avoid the version (,5.6]; Upgrade honeywell maxpro_nvr_se_firmware to a higher version than 5.6,and avoid the version (,5.6]; Upgrade honeywell maxpro_nvr_pe_firmware to a higher version than 5.6,and avoid the version (,5.6]; Upgrade honeywell mpnvrswxx_firmware to a higher version than 5.6,and avoid the version (,5.6]; Upgrade honeywell hnmswvms_firmware to a higher version than vms560,and avoid the version (,vms560]; Upgrade honeywell hnmswvmslt_firmware to a higher version than vms560,and avoid the version (,vms560]