CVEvulnerability

CVE-2019-18230

7.5 HIGH Published 2019-10-31 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-10-31
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-306

Description

Honeywell equIP and Performance series IP cameras, multiple versions, A vulnerability exists where the affected product allows unauthenticated access to audio streaming over HTTP.

Affected configurations

• honeywell h4d8pr1 firmware (< 1.000.hw01.3.20190820) • honeywell hfd5pr1 firmware (< 1.000.hw01.1.20190822) • honeywell hpw2p1 firmware (< 1.000.hw01.3.20190820) • honeywell hdzp304di firmware (< 1.000.hw10.5.20190812) • honeywell hdzp252di firmware (< 1.000.hw02.3.20181109) • honeywell hdz302din-s1 firmware (< 1.000.0041.20180530) • honeywell hdz302lik firmware (< 1.000.61.1.20180607) • honeywell hdz302liw firmware (< 1.000.61.1.20180607) • honeywell hfd6gr1 firmware (< 1.000.hw00.9.20180510) • honeywell hfd8gr1 firmware (< 1.000.hw00.9.20180510) • honeywell hm4l8gr1 firmware (< 1.000.hw02.8.20190813) • honeywell hmbl8gr1 firmware (< 1.000.hw02.8.20190813) • honeywell h2w2gr1 firmware (< 1.000.0000.18.20190409) • honeywell h3w2gr1 firmware (< 1.000.hw00.21.20190812) • honeywell h3w2gr1v firmware (< 1.000.0000.18.20190409) • honeywell h3w2gr2 firmware (< 1.000.hw00.21.20190812) • honeywell h3w4gr1 firmware (< 1.000.hw00.21.20190812) • honeywell h3w4gr1v firmware (< 1.000.0000.18.20190409) • honeywell h4d8gr1 firmware (< 2.420.hw00.9.20180510) • honeywell h4l2gr1 firmware (< 1.000.0000.18.20190423) • honeywell h4l2gr1v firmware (< 1.000.0000.18.20190423) • honeywell h4l6gr2 firmware (< 1.000.hw02.8.20190813) • honeywell h4lggr2 firmware (< 1.000.hw04.3.20190813) • honeywell h4w2gr1 firmware (< 1.000.hw00.21.20190812) • honeywell h4w2gr1v firmware (< 1.000.0000.18.20190409) • honeywell h4w2gr2 firmware (< 1.000.hw00.21.20190812) • honeywell h4w4gr1 firmware (< 1.000.hw00.21.20190812) • honeywell h4w4gr1v firmware (< 1.000.0000.18.20190409) • honeywell hbd8gr1 firmware (< 2.420.hw00.9.20180510) • honeywell hbl2gr1 firmware (< 2.420.hw01.33.20190812) • honeywell hbl2gr1v firmware (< 1.000.0000.18.20190423) • honeywell hbl6gr2 firmware (< 1.000.hw04.3.20190813) • honeywell hbl6gr2 firmware (< 1.000.hw02.8.20190813) • honeywell hbw2gr1 firmware (< 1.000.hw00.21.20190812) • honeywell hbw2gr1v firmware (< 1.000.0000.18.20190409) • honeywell hbw2gr3 firmware (< 1.000.hw00.21.20190812) • honeywell hbw2gr3v firmware (< 1.000.0000.18.20190409) • honeywell hbw4gr1 firmware (< 1.000.hw00.21.20190812) • honeywell hbw4gr1v firmware (< 1.000.0000.18.20190409) • honeywell hcd8g firmware (< 2.420.hw00.9.20180510) • honeywell hcl2g firmware (< 1.000.0000.18.20190423) • honeywell hcl2gv firmware (< 1.000.0000.18.20190423) • honeywell hcw2g firmware (< 1.000.hw00.21.20190812) • honeywell hcw2gv firmware (< 1.000.0000.18.20190409) • honeywell hcw4g firmware (< 1.000.hw00.21.20190812) • honeywell hdz302d firmware (< 1.000.0041.20180530) • honeywell hdz302de firmware (< 1.000.0041.20180530) • honeywell hdz302din firmware (< 1.000.0041.20180530) • honeywell hdz302din-c1 firmware (< 1.000.0041.20180530)

Related

Weakness · CWE (1)

  • CWE-306 Missing Authentication for Critical Functionality weakness

References