Honeywell Update
3247Warning Date
Severity Level
Warning Number
Target Sector
27 October, 2019
● Medium
2019-563
Communication and information technology
Description:
Honeywell has released security update to address a vulnerability in the following product:
- IP-AK2 Access Control Panel Version 1.04.07 and prior
Threats:
Attacker could exploit this vulnerability by downloading configuration files directly through a URL without authentication.
Best Practice and Recommendations:
The CERT team encourages users to update to version 1.04.15 and Honeywell recommends affected users contact customer support to resolve the issue: https://www.honeywell.com/en-us/contact