CVEvulnerability

CVE-2019-18226

9.8 CRITICAL Published 2019-10-31 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-10-31
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-294

Description

Honeywell equIP series and Performance series IP cameras and recorders, A vulnerability exists in the affected products where IP cameras and recorders have a potential replay attack vulnerability as a weak authentication method is retained for compatibility with legacy products.

Affected configurations

• honeywell h2w2pc1m firmware • honeywell h2w2per3 firmware • honeywell h2w4per3 firmware • honeywell h4w2per2 firmware • honeywell h4w2per3 firmware • honeywell h4w4per2 firmware • honeywell h4w4per3 firmware • honeywell h4w8pr2 firmware • honeywell hbd2per1 firmware • honeywell hbw2per1 firmware • honeywell hbw2per2 firmware • honeywell hbw4per1 firmware • honeywell hbw4per2 firmware • honeywell hbw4pgr1 firmware • honeywell hbw8pr2 firmware • honeywell hed2per3 firmware • honeywell hew2per2 firmware • honeywell hew2per3 firmware • honeywell hew4per2b firmware • honeywell hew4per3 firmware • honeywell hew4per3b firmware • honeywell hdzp252di firmware • honeywell hdzp304di firmware • honeywell hpw2p1 firmware • honeywell h2w2gr1 firmware • honeywell h3w2gr1v firmware • honeywell h3w4gr1v firmware • honeywell h3w2gr1 firmware • honeywell h3w2gr2 firmware • honeywell h3w4gr1 firmware • honeywell h4l2gr1v firmware • honeywell h4w2gr1 firmware • honeywell h4w2gr1v firmware • honeywell h4w4gr1v firmware • honeywell h4l2gr1 firmware • honeywell h4w2gr2 firmware • honeywell h4w4gr1 firmware • honeywell h4l6gr2 firmware • honeywell hm4l8gr1 firmware • honeywell h4d8gr1 firmware • honeywell hbl2gr1v firmware • honeywell hbw2gr1v firmware • honeywell hbw2gr3v firmware • honeywell hbw4gr1v firmware • honeywell hbl6gr2 firmware • honeywell hmbl8gr1 firmware • honeywell hbd8gr1 firmware • honeywell hfd6gr1 firmware • honeywell hfd8gr1 firmware • honeywell hdz302liw firmware • honeywell hdz302lik firmware • honeywell hdz302de firmware • honeywell hdz302d firmware • honeywell hdz302din-c1 firmware • honeywell hdz302din-s1 firmware • honeywell hepz302w0 firmware • honeywell hcl2gv firmware • honeywell hcl2g firmware • honeywell hcw2g firmware • honeywell hcw4g firmware … and 4 more

Related

Weakness · CWE (1)

  • CWE-294 Authentication Bypass by Capture-replay weakness

References