Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2019-18230 (GCVE-0-2019-18230)
Vulnerability from cvelistv5 – Published: 2019-10-31 21:15 – Updated: 2024-08-05 01:47
VLAI
EPSS
Summary
Honeywell equIP and Performance series IP cameras, multiple versions, A vulnerability exists where the affected product allows unauthenticated access to audio streaming over HTTP.
Severity
7.5 (High)
CWE
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://www.us-cert.gov/ics/advisories/icsa-19-304-03 | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| n/a | Honeywell equIP & Performance series IP cameras |
Affected:
equIP Camera,Vulnability fixed from version,H2W2GR1 1.000.0000.18.20190409,H3W2GR1 1.000.HW00.21.20190812,H3W2GR1V 1.000.0000.18.20190409,H3W2GR2 1.000.HW00.21.20190812,H3W4GR1 1.000.HW00.21.20190812,H3W4GR1V 1.000.0000.18.20190409,H4D8GR1 2.420.HW00.9.20180510,H4L2GR1 1.000.0000.18.20190423,H4L2GR1V 1.000.0000.18.20190423,H4L6GR2 1.000.HW02.8.20190813,H4LGGR2 .000.HW04.3.20190813,H4W2GR1 1.000.HW00.21.20190812,H4W2GR1V 1.000.0000.18.20190409,H4W2GR2 1.000.HW00.21.20190812,H4W4GR1 1.000.HW00.21.20190812,H4W4GR1V 1.000.0000.18.20190409,HBD8GR1 2.420.HW00.9.20180510,HBL2GR1 2.420.HW01.33.20190812,HBL2GR1V 1.000.0000.18.20190423,HBL6GR2 1.000.HW04.3.20190813,HBL6GR2 1.000.HW02.8.20190813,HBW2GR1 1.000.HW00.21.20190812, HBW2GR1V 1.000.0000.18.20190409,HBW2GR3 1.000.HW00.21.20190812,HBW2GR3V 1.000.0000.18.20190409,HBW4GR1 1.000.HW00.21.20190812, HBW4GR1V 1.000.0000.18.20190409,HCD8G 2.420.HW00.9.20180510,HCL2G 1.000.0000.18.20190423,HCL2GV 1.000.0000.18.20190423,HCW2G 1.000.HW00.21.20190812,HCW2GV ...[truncated*]
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T01:47:14.024Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.us-cert.gov/ics/advisories/icsa-19-304-03"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "Honeywell equIP \u0026 Performance series IP cameras",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "equIP Camera,Vulnability fixed from version,H2W2GR1 1.000.0000.18.20190409,H3W2GR1 1.000.HW00.21.20190812,H3W2GR1V 1.000.0000.18.20190409,H3W2GR2 1.000.HW00.21.20190812,H3W4GR1 1.000.HW00.21.20190812,H3W4GR1V 1.000.0000.18.20190409,H4D8GR1 2.420.HW00.9.20180510,H4L2GR1 1.000.0000.18.20190423,H4L2GR1V 1.000.0000.18.20190423,H4L6GR2 1.000.HW02.8.20190813,H4LGGR2 .000.HW04.3.20190813,H4W2GR1 1.000.HW00.21.20190812,H4W2GR1V 1.000.0000.18.20190409,H4W2GR2 1.000.HW00.21.20190812,H4W4GR1 1.000.HW00.21.20190812,H4W4GR1V 1.000.0000.18.20190409,HBD8GR1 2.420.HW00.9.20180510,HBL2GR1 2.420.HW01.33.20190812,HBL2GR1V 1.000.0000.18.20190423,HBL6GR2 1.000.HW04.3.20190813,HBL6GR2 1.000.HW02.8.20190813,HBW2GR1 1.000.HW00.21.20190812, HBW2GR1V 1.000.0000.18.20190409,HBW2GR3 1.000.HW00.21.20190812,HBW2GR3V 1.000.0000.18.20190409,HBW4GR1 1.000.HW00.21.20190812, HBW4GR1V 1.000.0000.18.20190409,HCD8G 2.420.HW00.9.20180510,HCL2G 1.000.0000.18.20190423,HCL2GV 1.000.0000.18.20190423,HCW2G 1.000.HW00.21.20190812,HCW2GV ...[truncated*]"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Honeywell equIP and Performance series IP cameras, multiple versions, A vulnerability exists where the affected product allows unauthenticated access to audio streaming over HTTP."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-306",
"description": "CWE-306",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2019-10-31T21:15:32.000Z",
"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"shortName": "icscert"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.us-cert.gov/ics/advisories/icsa-19-304-03"
}
],
"x_ConverterErrors": {
"version_name": {
"error": "version_name too long. Use array of versions to record more than one version.",
"message": "Truncated!"
}
},
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "ics-cert@hq.dhs.gov",
"ID": "CVE-2019-18230",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Honeywell equIP \u0026 Performance series IP cameras",
"version": {
"version_data": [
{
"version_value": "equIP Camera,Vulnability fixed from version,H2W2GR1 1.000.0000.18.20190409,H3W2GR1 1.000.HW00.21.20190812,H3W2GR1V 1.000.0000.18.20190409,H3W2GR2 1.000.HW00.21.20190812,H3W4GR1 1.000.HW00.21.20190812,H3W4GR1V 1.000.0000.18.20190409,H4D8GR1 2.420.HW00.9.20180510,H4L2GR1 1.000.0000.18.20190423,H4L2GR1V 1.000.0000.18.20190423,H4L6GR2 1.000.HW02.8.20190813,H4LGGR2 .000.HW04.3.20190813,H4W2GR1 1.000.HW00.21.20190812,H4W2GR1V 1.000.0000.18.20190409,H4W2GR2 1.000.HW00.21.20190812,H4W4GR1 1.000.HW00.21.20190812,H4W4GR1V 1.000.0000.18.20190409,HBD8GR1 2.420.HW00.9.20180510,HBL2GR1 2.420.HW01.33.20190812,HBL2GR1V 1.000.0000.18.20190423,HBL6GR2 1.000.HW04.3.20190813,HBL6GR2 1.000.HW02.8.20190813,HBW2GR1 1.000.HW00.21.20190812, HBW2GR1V 1.000.0000.18.20190409,HBW2GR3 1.000.HW00.21.20190812,HBW2GR3V 1.000.0000.18.20190409,HBW4GR1 1.000.HW00.21.20190812, HBW4GR1V 1.000.0000.18.20190409,HCD8G 2.420.HW00.9.20180510,HCL2G 1.000.0000.18.20190423,HCL2GV 1.000.0000.18.20190423,HCW2G 1.000.HW00.21.20190812,HCW2GV 1.000.0000.18.20190409,HCW4G 1.000.HW00.21.20190812,HDZ302D 1.000.0041.20180530,HDZ302DE 1.000.0041.20180530,HDZ302DIN 1.000.0041.20180530,HDZ302DIN-C1 1.000.0041.20180530,HDZ302DIN-S1 1.000.0041.20180530,HDZ302LIK 1.000.61.1.20180607,HDZ302LIW 1.000.61.1.20180607,HFD6GR1 1.000.HW00.9.20180510,HFD8GR1 1.000.HW00.9.20180510,HM4L8GR1 1.000.HW02.8.20190813,HMBL8GR1 1.000.HW02.8.20190813,Performance Series Vulnability fixed from version,H4D8PR1 1.000.HW01.3.20190820,HFD5PR1 1.000.HW01.1.20190822,HPW2P1 1.000.HW01.3.20190820,HDZP304DI 1.000.HW10.5.20190812,HDZP252DI 1.000.HW02.3.20181109"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Honeywell equIP and Performance series IP cameras, multiple versions, A vulnerability exists where the affected product allows unauthenticated access to audio streaming over HTTP."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-306"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.us-cert.gov/ics/advisories/icsa-19-304-03",
"refsource": "MISC",
"url": "https://www.us-cert.gov/ics/advisories/icsa-19-304-03"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"assignerShortName": "icscert",
"cveId": "CVE-2019-18230",
"datePublished": "2019-10-31T21:15:32.000Z",
"dateReserved": "2019-10-22T00:00:00.000Z",
"dateUpdated": "2024-08-05T01:47:14.024Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2019-18230",
"date": "2026-06-25",
"epss": "0.01132",
"percentile": "0.62349"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2019-18230\",\"sourceIdentifier\":\"ics-cert@hq.dhs.gov\",\"published\":\"2019-10-31T22:15:11.080\",\"lastModified\":\"2024-11-21T04:32:53.170\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Honeywell equIP and Performance series IP cameras, multiple versions, A vulnerability exists where the affected product allows unauthenticated access to audio streaming over HTTP.\"},{\"lang\":\"es\",\"value\":\"En las c\u00e1maras IP Honeywell equIP and Performance series, m\u00faltiples versiones, una vulnerabilidad se presenta donde el producto afectado permite el acceso no autenticado a la transmisi\u00f3n de audio mediante HTTP.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:P/I:N/A:N\",\"baseScore\":5.0,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":10.0,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"ics-cert@hq.dhs.gov\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-306\"}]},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-306\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:honeywell:h4d8pr1_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.000.hw01.3.20190820\",\"matchCriteriaId\":\"8F7C6114-0ABC-4FD9-B709-D0B82DB9AD6E\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:honeywell:h4d8pr1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D0087979-D5F3-47C1-A5C9-6B91CBA40914\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:honeywell:hfd5pr1_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.000.hw01.1.20190822\",\"matchCriteriaId\":\"D46CE7CC-4795-4408-B441-01B144BDA89F\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:honeywell:hfd5pr1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1B8CE3FF-1ECA-4F92-9E1D-56008B9BAFBF\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:honeywell:hpw2p1_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.000.hw01.3.20190820\",\"matchCriteriaId\":\"C8D59274-1659-4593-B6BD-2AB6567E336F\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:honeywell:hpw2p1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"414E3927-B8A6-4E57-972A-27DA0163167E\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:honeywell:hdzp304di_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.000.hw10.5.20190812\",\"matchCriteriaId\":\"1F99CF9C-9508-4D2E-8DA2-D92AC808F707\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:honeywell:hdzp304di:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B3123143-9544-45B6-81ED-84E3ECE1B905\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:honeywell:hdzp252di_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.000.hw02.3.20181109\",\"matchCriteriaId\":\"48783F07-0946-4637-B157-C36EF6648661\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:honeywell:hdzp252di:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AEC68AC5-197E-4A0F-A055-4800CDA24E66\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:honeywell:hdz302din-s1_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.000.0041.20180530\",\"matchCriteriaId\":\"45DC8B05-6D6F-439A-B83D-2B83814B5433\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:honeywell:hdz302din-s1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0A5CFE2B-19B9-43E6-901B-30DB3EDCF698\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:honeywell:hdz302lik_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.000.61.1.20180607\",\"matchCriteriaId\":\"DC5F0831-0769-4CAE-B7F2-A2FCB508C66E\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:honeywell:hdz302lik:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9FF469F2-2441-4012-9349-3FC39A177E16\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:honeywell:hdz302liw_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.000.61.1.20180607\",\"matchCriteriaId\":\"E6F83FBB-5051-48FE-B772-90612FB27ED0\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:honeywell:hdz302liw:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"60D1036C-D4D5-476E-813A-729E9250B5DD\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:honeywell:hfd6gr1_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.000.hw00.9.20180510\",\"matchCriteriaId\":\"A3F98ED9-FA86-4688-AF41-F9FAC269194C\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:honeywell:hfd6gr1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C2A27649-A042-439B-A569-DEC3FD82A3D6\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:honeywell:hfd8gr1_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.000.hw00.9.20180510\",\"matchCriteriaId\":\"0131324A-10EF-4897-A37E-695EF82818E5\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:honeywell:hfd8gr1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B8400E98-2092-4B38-B69A-F37360F5BCF1\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:honeywell:hm4l8gr1_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.000.hw02.8.20190813\",\"matchCriteriaId\":\"A61BB321-C0C1-447A-AB92-280BF41DD38F\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:honeywell:hm4l8gr1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4A2F39C2-8F06-44CC-A1BE-AFFC7F9D5783\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:honeywell:hmbl8gr1_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.000.hw02.8.20190813\",\"matchCriteriaId\":\"FC820CC0-AE09-4ED1-9C97-3833E1895605\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:honeywell:hmbl8gr1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"53D8C69A-D83D-4342-A4A3-6D0978CE761A\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:honeywell:h2w2gr1_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.000.0000.18.20190409\",\"matchCriteriaId\":\"885D7C5F-26C8-4BA6-8B13-4B585DA0D3EE\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:honeywell:h2w2gr1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"35D3C658-893D-49F6-B17A-912B58D87B09\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:honeywell:h3w2gr1_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.000.hw00.21.20190812\",\"matchCriteriaId\":\"F2EEC88B-7325-427F-A165-18F9361B74A4\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:honeywell:h3w2gr1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7E2FC9E9-D29F-49B0-98A0-4DF8D2A8AFBF\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:honeywell:h3w2gr1v_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.000.0000.18.20190409\",\"matchCriteriaId\":\"FF4DED89-1B77-4551-9666-A62EFA59E237\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:honeywell:h3w2gr1v:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"37732000-B042-4C65-A7AD-71D320A8DDB0\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:honeywell:h3w2gr2_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.000.hw00.21.20190812\",\"matchCriteriaId\":\"DF7EF078-CB34-437D-9EB5-C674BC661FA2\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:honeywell:h3w2gr2:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B96C23F9-EB20-4AE8-BB8C-CD34AC2ADA5D\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:honeywell:h3w4gr1_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.000.hw00.21.20190812\",\"matchCriteriaId\":\"31019720-DCD2-4CB9-B5AA-0250B2423F5C\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:honeywell:h3w4gr1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E3419902-0162-4304-97DA-5273F4E185BD\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:honeywell:h3w4gr1v_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.000.0000.18.20190409\",\"matchCriteriaId\":\"C28B3918-28B4-41D0-B63E-A36F6A4B642D\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:honeywell:h3w4gr1v:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"09D72180-4728-47E8-B268-FEA1ADFD16B1\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:honeywell:h4d8gr1_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"2.420.hw00.9.20180510\",\"matchCriteriaId\":\"F20916C6-38DC-4328-8C45-B3EBB6711360\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:honeywell:h4d8gr1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"73D9F9ED-E57E-4187-BABD-CDB70F261296\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:honeywell:h4l2gr1_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.000.0000.18.20190423\",\"matchCriteriaId\":\"8F066AFA-FC83-4329-8BD2-31136770D607\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:honeywell:h4l2gr1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0395AB8D-65D9-4A03-8629-DC318AE5E120\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:honeywell:h4l2gr1v_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.000.0000.18.20190423\",\"matchCriteriaId\":\"AEF45C26-938E-4B15-AD99-918B104AA0A8\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:honeywell:h4l2gr1v:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2908FC2D-40C1-4E65-BD23-DCE8B24B4C5A\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:honeywell:h4l6gr2_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.000.hw02.8.20190813\",\"matchCriteriaId\":\"0A867DDF-D118-485E-A807-97EDE8303041\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:honeywell:h4l6gr2:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D4E38F48-5F11-47A5-9858-EB31D00E254E\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:honeywell:h4lggr2_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.000.hw04.3.20190813\",\"matchCriteriaId\":\"C85700B4-E4C1-4A90-830F-CBEA7137D0B6\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:honeywell:h4lggr2:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9ACB6FFB-2983-4ECE-BCF2-D1BD0FA9F5A5\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:honeywell:h4w2gr1_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.000.hw00.21.20190812\",\"matchCriteriaId\":\"90C93984-A8DF-410A-A65A-3A30A3CCF27B\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:honeywell:h4w2gr1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E4C2C198-3C0C-4F62-A7A6-A06D2E21E406\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:honeywell:h4w2gr1v_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.000.0000.18.20190409\",\"matchCriteriaId\":\"B2E9CFDE-DAB8-4828-997B-52C9459BEB35\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:honeywell:h4w2gr1v:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4D37618E-44CE-4E7A-8559-A2844D43C433\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:honeywell:h4w2gr2_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.000.hw00.21.20190812\",\"matchCriteriaId\":\"8DE0D64A-5EEE-442C-A1C3-F95E7A196F93\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:honeywell:h4w2gr2:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4B806C40-EA96-4DCC-8311-85A9D78E23F0\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:honeywell:h4w4gr1_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.000.hw00.21.20190812\",\"matchCriteriaId\":\"7FA5C2FF-B877-4D6D-91AD-519491A1EBE9\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:honeywell:h4w4gr1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3F8C5BFC-7817-4E82-A351-5960E1AD891C\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:honeywell:h4w4gr1v_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.000.0000.18.20190409\",\"matchCriteriaId\":\"45830A0E-9EFE-4090-9F13-AF6480216D42\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:honeywell:h4w4gr1v:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"39A84649-C4A1-41B6-A958-8C22570B3175\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:honeywell:hbd8gr1_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"2.420.hw00.9.20180510\",\"matchCriteriaId\":\"D7E58E04-C957-4D5C-AE95-DD7B130FD1D3\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:honeywell:hbd8gr1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E6F4352A-3D27-4555-B188-03CD40545CCD\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:honeywell:hbl2gr1_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"2.420.hw01.33.20190812\",\"matchCriteriaId\":\"07E38B1B-DC53-44A1-96E2-0D1FE34EB6F0\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:honeywell:hbl2gr1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"96437B7C-EFC9-4660-B778-692A545A511E\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:honeywell:hbl2gr1v_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.000.0000.18.20190423\",\"matchCriteriaId\":\"70D1D498-E87F-4733-B657-ACA3ACB84934\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:honeywell:hbl2gr1v:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B105FB2D-E283-4A26-B38E-C1A4A1141FC6\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:honeywell:hbl6gr2_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.000.hw04.3.20190813\",\"matchCriteriaId\":\"0580F68B-4580-4F4A-B64F-3D515F76E324\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:honeywell:hbl6gr2:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B99D4E17-DBA8-41AD-9C8F-61550EA3B767\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:honeywell:hbl6gr2_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.000.hw02.8.20190813\",\"matchCriteriaId\":\"0FEA964F-690B-4218-B1C7-A0A6581C837D\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:honeywell:hbl6gr2:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B99D4E17-DBA8-41AD-9C8F-61550EA3B767\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:honeywell:hbw2gr1_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.000.hw00.21.20190812\",\"matchCriteriaId\":\"2027345C-F585-40A2-A1BC-73E7F9AA8780\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:honeywell:hbw2gr1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5653DE5B-ED7D-48DF-AB97-56FC321FA4AF\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:honeywell:hbw2gr1v_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.000.0000.18.20190409\",\"matchCriteriaId\":\"72C4EAB2-5761-4FEB-A05F-096C5BF4B855\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:honeywell:hbw2gr1v:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0307DDBD-B50C-4052-A6EC-5BBF8A63A9DE\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:honeywell:hbw2gr3_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.000.hw00.21.20190812\",\"matchCriteriaId\":\"6B266034-9B98-4761-9A37-0B54A661DD43\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:honeywell:hbw2gr3:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"39BA81EF-96E2-41AA-9508-600662691DF1\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:honeywell:hbw2gr3v_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.000.0000.18.20190409\",\"matchCriteriaId\":\"466ADA61-D46A-4B56-B5E1-B6D2F1D071DC\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:honeywell:hbw2gr3v:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7E379EDE-DD1B-4DFE-AB39-5B45EA0A8398\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:honeywell:hbw4gr1_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.000.hw00.21.20190812\",\"matchCriteriaId\":\"1174D29E-9B52-47D3-856E-779BC809A019\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:honeywell:hbw4gr1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CA95C074-1360-478E-8083-4F16BD1DC451\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:honeywell:hbw4gr1v_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.000.0000.18.20190409\",\"matchCriteriaId\":\"3CCA15F8-407B-4347-8339-963FB3439E45\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:honeywell:hbw4gr1v:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7994EC06-FC72-4EC6-B061-57416FC8838C\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:honeywell:hcd8g_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"2.420.hw00.9.20180510\",\"matchCriteriaId\":\"19972F3D-03DA-4B6A-8A24-23A8E87976BC\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:honeywell:hcd8g:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7E79054B-A724-4D0F-BD15-928D3B591136\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:honeywell:hcl2g_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.000.0000.18.20190423\",\"matchCriteriaId\":\"65217B2F-FBD8-4DA4-977F-D97D790A8D33\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:honeywell:hcl2g:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"66B8500B-88FC-4372-B97D-5EE195DBE938\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:honeywell:hcl2gv_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.000.0000.18.20190423\",\"matchCriteriaId\":\"9F54DBCC-5624-4175-AD65-ED9D67CA04EB\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:honeywell:hcl2gv:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"264E205D-C14A-4C6D-B23F-3E0655AEBBDF\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:honeywell:hcw2g_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.000.hw00.21.20190812\",\"matchCriteriaId\":\"B95790C6-15B8-4416-9ABB-FCB3FF7C3E58\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:honeywell:hcw2g:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"66A0569A-ADBE-4BA9-9A42-CA41134099B2\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:honeywell:hcw2gv_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.000.0000.18.20190409\",\"matchCriteriaId\":\"4E7AEDF9-1B0C-4B0B-8F0F-E72946E83AF7\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:honeywell:hcw2gv:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D6F56435-9D0B-410A-A77D-17D9B3543417\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:honeywell:hcw4g_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.000.hw00.21.20190812\",\"matchCriteriaId\":\"7BF20DCC-A357-4B7D-AD82-7F2865F60A4E\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:honeywell:hcw4g:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"859CD6B5-8946-408F-B0C2-16F3B564A090\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:honeywell:hdz302d_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.000.0041.20180530\",\"matchCriteriaId\":\"80E7680F-EACF-4A3D-9132-5F0C1034D6F1\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:honeywell:hdz302d:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3236AAD2-B29C-4A43-A080-DF01534CD8FD\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:honeywell:hdz302de_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.000.0041.20180530\",\"matchCriteriaId\":\"9FCE5563-C583-438F-89C3-2E784A0BA8A9\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:honeywell:hdz302de:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CCF6422D-E221-4B5A-A801-38A13305186F\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:honeywell:hdz302din_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.000.0041.20180530\",\"matchCriteriaId\":\"B3BD56F2-914F-4E71-A361-2FF860249227\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:honeywell:hdz302din:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"30ABEDE1-5064-4169-AA1A-5F114885910B\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:honeywell:hdz302din-c1_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.000.0041.20180530\",\"matchCriteriaId\":\"7C5B91A7-8CA4-40B9-A39E-C06DCAA5BEE6\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:honeywell:hdz302din-c1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4921E9DF-F2AC-4EDC-B0C9-A25A6FC4096F\"}]}]}],\"references\":[{\"url\":\"https://www.us-cert.gov/ics/advisories/icsa-19-304-03\",\"source\":\"ics-cert@hq.dhs.gov\",\"tags\":[\"Third Party Advisory\",\"US Government Resource\"]},{\"url\":\"https://www.us-cert.gov/ics/advisories/icsa-19-304-03\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"US Government Resource\"]}]}}"
}
}
Title
Honeywell equIP系列和Performance系列IP摄像头访问控制错误漏洞
Description
Honeywell equIP H4L2GR1等都是美国霍尼韦尔(Honeywell)公司的一款IP摄像机。
Honeywell equIP系列和Performance系列IP摄像头中存在访问控制错误漏洞,攻击者可利用该漏洞进行未授权访问。
Severity
中
Patch Name
Honeywell equIP系列和Performance系列IP摄像头访问控制错误漏洞的补丁
Patch Description
Honeywell equIP H4L2GR1等都是美国霍尼韦尔(Honeywell)公司的一款IP摄像机。
Honeywell equIP系列和Performance系列IP摄像头中存在访问控制错误漏洞,攻击者可利用该漏洞进行未授权访问。目前,供应商发布了安全公告及相关补丁信息,修复了此漏洞。
Formal description
厂商已发布了漏洞修复程序,请及时关注更新: https://www.honeywell.com/
Reference
https://www.us-cert.gov/ics/advisories/icsa-19-304-03
https://nvd.nist.gov/vuln/detail/CVE-2019-18230
Impacted products
| Name | ['Honeywell equIP H3W2GR1', 'Honeywell equIP H3W2GR1V', 'Honeywell equIP H3W2GR2', 'Honeywell equIP H3W4GR1', 'Honeywell equIP H3W4GR1V', 'Honeywell equIP H4D8GR1', 'Honeywell equIP H4L2GR1V', 'Honeywell equIP H4L6GR2', 'Honeywell equIP H4LGGR2', 'Honeywell equIP H4W2GR1', 'Honeywell equIP H4W2GR1V', 'Honeywell equIP H4W2GR2', 'Honeywell equIP H4W4GR1', 'Honeywell equIP H4W4GR1V', 'Honeywell equIP HBD8GR1', 'Honeywell equIP HBL2GR1', 'Honeywell equIP HBL2GR1V', 'Honeywell equIP HBL6GR2', 'Honeywell equIP HBW2GR1', 'Honeywell equIP HBW2GR1V', 'Honeywell equIP HBW2GR3', 'Honeywell equIP HBW2GR3V', 'Honeywell Performance HDZ302DIN-S1', 'Honeywell Performance HDZ302LIK', 'Honeywell Performance HDZ302LIW', 'Honeywell Performance HFD6GR1', 'Honeywell Performance HFD8GR1', 'Honeywell Performance HM4L8GR1', 'Honeywell Performance HMBL8GR1'] |
|---|
{
"cves": {
"cve": {
"cveNumber": "CVE-2019-18230",
"cveUrl": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18230"
}
},
"description": "Honeywell equIP H4L2GR1\u7b49\u90fd\u662f\u7f8e\u56fd\u970d\u5c3c\u97e6\u5c14\uff08Honeywell\uff09\u516c\u53f8\u7684\u4e00\u6b3eIP\u6444\u50cf\u673a\u3002\n\nHoneywell equIP\u7cfb\u5217\u548cPerformance\u7cfb\u5217IP\u6444\u50cf\u5934\u4e2d\u5b58\u5728\u8bbf\u95ee\u63a7\u5236\u9519\u8bef\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u8fdb\u884c\u672a\u6388\u6743\u8bbf\u95ee\u3002",
"formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://www.honeywell.com/",
"isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
"number": "CNVD-2019-39763",
"openTime": "2019-11-08",
"patchDescription": "Honeywell equIP H4L2GR1\u7b49\u90fd\u662f\u7f8e\u56fd\u970d\u5c3c\u97e6\u5c14\uff08Honeywell\uff09\u516c\u53f8\u7684\u4e00\u6b3eIP\u6444\u50cf\u673a\u3002\r\n\r\nHoneywell equIP\u7cfb\u5217\u548cPerformance\u7cfb\u5217IP\u6444\u50cf\u5934\u4e2d\u5b58\u5728\u8bbf\u95ee\u63a7\u5236\u9519\u8bef\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u8fdb\u884c\u672a\u6388\u6743\u8bbf\u95ee\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
"patchName": "Honeywell equIP\u7cfb\u5217\u548cPerformance\u7cfb\u5217IP\u6444\u50cf\u5934\u8bbf\u95ee\u63a7\u5236\u9519\u8bef\u6f0f\u6d1e\u7684\u8865\u4e01",
"products": {
"product": [
"Honeywell equIP H3W2GR1",
"Honeywell equIP H3W2GR1V",
"Honeywell equIP H3W2GR2",
"Honeywell equIP H3W4GR1",
"Honeywell equIP H3W4GR1V",
"Honeywell equIP H4D8GR1",
"Honeywell equIP H4L2GR1V",
"Honeywell equIP H4L6GR2",
"Honeywell equIP H4LGGR2",
"Honeywell equIP H4W2GR1",
"Honeywell equIP H4W2GR1V",
"Honeywell equIP H4W2GR2",
"Honeywell equIP H4W4GR1",
"Honeywell equIP H4W4GR1V",
"Honeywell equIP HBD8GR1",
"Honeywell equIP HBL2GR1",
"Honeywell equIP HBL2GR1V",
"Honeywell equIP HBL6GR2",
"Honeywell equIP HBW2GR1",
"Honeywell equIP HBW2GR1V",
"Honeywell equIP HBW2GR3",
"Honeywell equIP HBW2GR3V",
"Honeywell Performance HDZ302DIN-S1",
"Honeywell Performance HDZ302LIK",
"Honeywell Performance HDZ302LIW",
"Honeywell Performance HFD6GR1",
"Honeywell Performance HFD8GR1",
"Honeywell Performance HM4L8GR1",
"Honeywell Performance HMBL8GR1"
]
},
"referenceLink": "https://www.us-cert.gov/ics/advisories/icsa-19-304-03\r\nhttps://nvd.nist.gov/vuln/detail/CVE-2019-18230",
"serverity": "\u4e2d",
"submitTime": "2019-10-31",
"title": "Honeywell equIP\u7cfb\u5217\u548cPerformance\u7cfb\u5217IP\u6444\u50cf\u5934\u8bbf\u95ee\u63a7\u5236\u9519\u8bef\u6f0f\u6d1e"
}
FKIE_CVE-2019-18230
Vulnerability from fkie_nvd - Published: 2019-10-31 22:15 - Updated: 2026-06-17 02:24
Severity
Summary
Honeywell equIP and Performance series IP cameras, multiple versions, A vulnerability exists where the affected product allows unauthenticated access to audio streaming over HTTP.
References
| URL | Tags | ||
|---|---|---|---|
| ics-cert@hq.dhs.gov | https://www.us-cert.gov/ics/advisories/icsa-19-304-03 | Third Party Advisory, US Government Resource | |
| af854a3a-2127-422b-91ae-364da2661108 | https://www.us-cert.gov/ics/advisories/icsa-19-304-03 | Third Party Advisory, US Government Resource |
Impacted products
{
"affected": [
{
"affectedData": [
{
"product": "Honeywell equIP \u0026 Performance series IP cameras",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "equIP Camera,Vulnability fixed from version,H2W2GR1 1.000.0000.18.20190409,H3W2GR1 1.000.HW00.21.20190812,H3W2GR1V 1.000.0000.18.20190409,H3W2GR2 1.000.HW00.21.20190812,H3W4GR1 1.000.HW00.21.20190812,H3W4GR1V 1.000.0000.18.20190409,H4D8GR1 2.420.HW00.9.20180510,H4L2GR1 1.000.0000.18.20190423,H4L2GR1V 1.000.0000.18.20190423,H4L6GR2 1.000.HW02.8.20190813,H4LGGR2 .000.HW04.3.20190813,H4W2GR1 1.000.HW00.21.20190812,H4W2GR1V 1.000.0000.18.20190409,H4W2GR2 1.000.HW00.21.20190812,H4W4GR1 1.000.HW00.21.20190812,H4W4GR1V 1.000.0000.18.20190409,HBD8GR1 2.420.HW00.9.20180510,HBL2GR1 2.420.HW01.33.20190812,HBL2GR1V 1.000.0000.18.20190423,HBL6GR2 1.000.HW04.3.20190813,HBL6GR2 1.000.HW02.8.20190813,HBW2GR1 1.000.HW00.21.20190812, HBW2GR1V 1.000.0000.18.20190409,HBW2GR3 1.000.HW00.21.20190812,HBW2GR3V 1.000.0000.18.20190409,HBW4GR1 1.000.HW00.21.20190812, HBW4GR1V 1.000.0000.18.20190409,HCD8G 2.420.HW00.9.20180510,HCL2G 1.000.0000.18.20190423,HCL2GV 1.000.0000.18.20190423,HCW2G 1.000.HW00.21.20190812,HCW2GV ...[truncated*]"
}
]
}
],
"source": "ics-cert@hq.dhs.gov"
}
],
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:h4d8pr1_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "8F7C6114-0ABC-4FD9-B709-D0B82DB9AD6E",
"versionEndExcluding": "1.000.hw01.3.20190820",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:h4d8pr1:-:*:*:*:*:*:*:*",
"matchCriteriaId": "D0087979-D5F3-47C1-A5C9-6B91CBA40914",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hfd5pr1_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "D46CE7CC-4795-4408-B441-01B144BDA89F",
"versionEndExcluding": "1.000.hw01.1.20190822",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hfd5pr1:-:*:*:*:*:*:*:*",
"matchCriteriaId": "1B8CE3FF-1ECA-4F92-9E1D-56008B9BAFBF",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hpw2p1_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "C8D59274-1659-4593-B6BD-2AB6567E336F",
"versionEndExcluding": "1.000.hw01.3.20190820",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hpw2p1:-:*:*:*:*:*:*:*",
"matchCriteriaId": "414E3927-B8A6-4E57-972A-27DA0163167E",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hdzp304di_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "1F99CF9C-9508-4D2E-8DA2-D92AC808F707",
"versionEndExcluding": "1.000.hw10.5.20190812",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hdzp304di:-:*:*:*:*:*:*:*",
"matchCriteriaId": "B3123143-9544-45B6-81ED-84E3ECE1B905",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hdzp252di_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "48783F07-0946-4637-B157-C36EF6648661",
"versionEndExcluding": "1.000.hw02.3.20181109",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hdzp252di:-:*:*:*:*:*:*:*",
"matchCriteriaId": "AEC68AC5-197E-4A0F-A055-4800CDA24E66",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hdz302din-s1_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "45DC8B05-6D6F-439A-B83D-2B83814B5433",
"versionEndExcluding": "1.000.0041.20180530",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hdz302din-s1:-:*:*:*:*:*:*:*",
"matchCriteriaId": "0A5CFE2B-19B9-43E6-901B-30DB3EDCF698",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hdz302lik_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "DC5F0831-0769-4CAE-B7F2-A2FCB508C66E",
"versionEndExcluding": "1.000.61.1.20180607",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hdz302lik:-:*:*:*:*:*:*:*",
"matchCriteriaId": "9FF469F2-2441-4012-9349-3FC39A177E16",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hdz302liw_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "E6F83FBB-5051-48FE-B772-90612FB27ED0",
"versionEndExcluding": "1.000.61.1.20180607",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hdz302liw:-:*:*:*:*:*:*:*",
"matchCriteriaId": "60D1036C-D4D5-476E-813A-729E9250B5DD",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hfd6gr1_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "A3F98ED9-FA86-4688-AF41-F9FAC269194C",
"versionEndExcluding": "1.000.hw00.9.20180510",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hfd6gr1:-:*:*:*:*:*:*:*",
"matchCriteriaId": "C2A27649-A042-439B-A569-DEC3FD82A3D6",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hfd8gr1_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "0131324A-10EF-4897-A37E-695EF82818E5",
"versionEndExcluding": "1.000.hw00.9.20180510",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hfd8gr1:-:*:*:*:*:*:*:*",
"matchCriteriaId": "B8400E98-2092-4B38-B69A-F37360F5BCF1",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hm4l8gr1_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "A61BB321-C0C1-447A-AB92-280BF41DD38F",
"versionEndExcluding": "1.000.hw02.8.20190813",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hm4l8gr1:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4A2F39C2-8F06-44CC-A1BE-AFFC7F9D5783",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hmbl8gr1_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "FC820CC0-AE09-4ED1-9C97-3833E1895605",
"versionEndExcluding": "1.000.hw02.8.20190813",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hmbl8gr1:-:*:*:*:*:*:*:*",
"matchCriteriaId": "53D8C69A-D83D-4342-A4A3-6D0978CE761A",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:h2w2gr1_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "885D7C5F-26C8-4BA6-8B13-4B585DA0D3EE",
"versionEndExcluding": "1.000.0000.18.20190409",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:h2w2gr1:-:*:*:*:*:*:*:*",
"matchCriteriaId": "35D3C658-893D-49F6-B17A-912B58D87B09",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:h3w2gr1_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "F2EEC88B-7325-427F-A165-18F9361B74A4",
"versionEndExcluding": "1.000.hw00.21.20190812",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:h3w2gr1:-:*:*:*:*:*:*:*",
"matchCriteriaId": "7E2FC9E9-D29F-49B0-98A0-4DF8D2A8AFBF",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:h3w2gr1v_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "FF4DED89-1B77-4551-9666-A62EFA59E237",
"versionEndExcluding": "1.000.0000.18.20190409",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:h3w2gr1v:-:*:*:*:*:*:*:*",
"matchCriteriaId": "37732000-B042-4C65-A7AD-71D320A8DDB0",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:h3w2gr2_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "DF7EF078-CB34-437D-9EB5-C674BC661FA2",
"versionEndExcluding": "1.000.hw00.21.20190812",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:h3w2gr2:-:*:*:*:*:*:*:*",
"matchCriteriaId": "B96C23F9-EB20-4AE8-BB8C-CD34AC2ADA5D",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:h3w4gr1_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "31019720-DCD2-4CB9-B5AA-0250B2423F5C",
"versionEndExcluding": "1.000.hw00.21.20190812",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:h3w4gr1:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E3419902-0162-4304-97DA-5273F4E185BD",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:h3w4gr1v_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "C28B3918-28B4-41D0-B63E-A36F6A4B642D",
"versionEndExcluding": "1.000.0000.18.20190409",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:h3w4gr1v:-:*:*:*:*:*:*:*",
"matchCriteriaId": "09D72180-4728-47E8-B268-FEA1ADFD16B1",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:h4d8gr1_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "F20916C6-38DC-4328-8C45-B3EBB6711360",
"versionEndExcluding": "2.420.hw00.9.20180510",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:h4d8gr1:-:*:*:*:*:*:*:*",
"matchCriteriaId": "73D9F9ED-E57E-4187-BABD-CDB70F261296",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:h4l2gr1_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "8F066AFA-FC83-4329-8BD2-31136770D607",
"versionEndExcluding": "1.000.0000.18.20190423",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:h4l2gr1:-:*:*:*:*:*:*:*",
"matchCriteriaId": "0395AB8D-65D9-4A03-8629-DC318AE5E120",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:h4l2gr1v_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "AEF45C26-938E-4B15-AD99-918B104AA0A8",
"versionEndExcluding": "1.000.0000.18.20190423",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:h4l2gr1v:-:*:*:*:*:*:*:*",
"matchCriteriaId": "2908FC2D-40C1-4E65-BD23-DCE8B24B4C5A",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:h4l6gr2_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "0A867DDF-D118-485E-A807-97EDE8303041",
"versionEndExcluding": "1.000.hw02.8.20190813",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:h4l6gr2:-:*:*:*:*:*:*:*",
"matchCriteriaId": "D4E38F48-5F11-47A5-9858-EB31D00E254E",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:h4lggr2_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "C85700B4-E4C1-4A90-830F-CBEA7137D0B6",
"versionEndExcluding": "1.000.hw04.3.20190813",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:h4lggr2:-:*:*:*:*:*:*:*",
"matchCriteriaId": "9ACB6FFB-2983-4ECE-BCF2-D1BD0FA9F5A5",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:h4w2gr1_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "90C93984-A8DF-410A-A65A-3A30A3CCF27B",
"versionEndExcluding": "1.000.hw00.21.20190812",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:h4w2gr1:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E4C2C198-3C0C-4F62-A7A6-A06D2E21E406",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:h4w2gr1v_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "B2E9CFDE-DAB8-4828-997B-52C9459BEB35",
"versionEndExcluding": "1.000.0000.18.20190409",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:h4w2gr1v:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4D37618E-44CE-4E7A-8559-A2844D43C433",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:h4w2gr2_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "8DE0D64A-5EEE-442C-A1C3-F95E7A196F93",
"versionEndExcluding": "1.000.hw00.21.20190812",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:h4w2gr2:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4B806C40-EA96-4DCC-8311-85A9D78E23F0",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:h4w4gr1_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "7FA5C2FF-B877-4D6D-91AD-519491A1EBE9",
"versionEndExcluding": "1.000.hw00.21.20190812",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:h4w4gr1:-:*:*:*:*:*:*:*",
"matchCriteriaId": "3F8C5BFC-7817-4E82-A351-5960E1AD891C",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:h4w4gr1v_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "45830A0E-9EFE-4090-9F13-AF6480216D42",
"versionEndExcluding": "1.000.0000.18.20190409",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:h4w4gr1v:-:*:*:*:*:*:*:*",
"matchCriteriaId": "39A84649-C4A1-41B6-A958-8C22570B3175",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hbd8gr1_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "D7E58E04-C957-4D5C-AE95-DD7B130FD1D3",
"versionEndExcluding": "2.420.hw00.9.20180510",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hbd8gr1:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E6F4352A-3D27-4555-B188-03CD40545CCD",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hbl2gr1_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "07E38B1B-DC53-44A1-96E2-0D1FE34EB6F0",
"versionEndExcluding": "2.420.hw01.33.20190812",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hbl2gr1:-:*:*:*:*:*:*:*",
"matchCriteriaId": "96437B7C-EFC9-4660-B778-692A545A511E",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hbl2gr1v_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "70D1D498-E87F-4733-B657-ACA3ACB84934",
"versionEndExcluding": "1.000.0000.18.20190423",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hbl2gr1v:-:*:*:*:*:*:*:*",
"matchCriteriaId": "B105FB2D-E283-4A26-B38E-C1A4A1141FC6",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hbl6gr2_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "0580F68B-4580-4F4A-B64F-3D515F76E324",
"versionEndExcluding": "1.000.hw04.3.20190813",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hbl6gr2:-:*:*:*:*:*:*:*",
"matchCriteriaId": "B99D4E17-DBA8-41AD-9C8F-61550EA3B767",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hbl6gr2_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "0FEA964F-690B-4218-B1C7-A0A6581C837D",
"versionEndExcluding": "1.000.hw02.8.20190813",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hbl6gr2:-:*:*:*:*:*:*:*",
"matchCriteriaId": "B99D4E17-DBA8-41AD-9C8F-61550EA3B767",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hbw2gr1_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "2027345C-F585-40A2-A1BC-73E7F9AA8780",
"versionEndExcluding": "1.000.hw00.21.20190812",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hbw2gr1:-:*:*:*:*:*:*:*",
"matchCriteriaId": "5653DE5B-ED7D-48DF-AB97-56FC321FA4AF",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hbw2gr1v_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "72C4EAB2-5761-4FEB-A05F-096C5BF4B855",
"versionEndExcluding": "1.000.0000.18.20190409",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hbw2gr1v:-:*:*:*:*:*:*:*",
"matchCriteriaId": "0307DDBD-B50C-4052-A6EC-5BBF8A63A9DE",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hbw2gr3_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "6B266034-9B98-4761-9A37-0B54A661DD43",
"versionEndExcluding": "1.000.hw00.21.20190812",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hbw2gr3:-:*:*:*:*:*:*:*",
"matchCriteriaId": "39BA81EF-96E2-41AA-9508-600662691DF1",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hbw2gr3v_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "466ADA61-D46A-4B56-B5E1-B6D2F1D071DC",
"versionEndExcluding": "1.000.0000.18.20190409",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hbw2gr3v:-:*:*:*:*:*:*:*",
"matchCriteriaId": "7E379EDE-DD1B-4DFE-AB39-5B45EA0A8398",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hbw4gr1_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "1174D29E-9B52-47D3-856E-779BC809A019",
"versionEndExcluding": "1.000.hw00.21.20190812",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hbw4gr1:-:*:*:*:*:*:*:*",
"matchCriteriaId": "CA95C074-1360-478E-8083-4F16BD1DC451",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hbw4gr1v_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "3CCA15F8-407B-4347-8339-963FB3439E45",
"versionEndExcluding": "1.000.0000.18.20190409",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hbw4gr1v:-:*:*:*:*:*:*:*",
"matchCriteriaId": "7994EC06-FC72-4EC6-B061-57416FC8838C",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hcd8g_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "19972F3D-03DA-4B6A-8A24-23A8E87976BC",
"versionEndExcluding": "2.420.hw00.9.20180510",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hcd8g:-:*:*:*:*:*:*:*",
"matchCriteriaId": "7E79054B-A724-4D0F-BD15-928D3B591136",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hcl2g_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "65217B2F-FBD8-4DA4-977F-D97D790A8D33",
"versionEndExcluding": "1.000.0000.18.20190423",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hcl2g:-:*:*:*:*:*:*:*",
"matchCriteriaId": "66B8500B-88FC-4372-B97D-5EE195DBE938",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hcl2gv_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "9F54DBCC-5624-4175-AD65-ED9D67CA04EB",
"versionEndExcluding": "1.000.0000.18.20190423",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hcl2gv:-:*:*:*:*:*:*:*",
"matchCriteriaId": "264E205D-C14A-4C6D-B23F-3E0655AEBBDF",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hcw2g_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "B95790C6-15B8-4416-9ABB-FCB3FF7C3E58",
"versionEndExcluding": "1.000.hw00.21.20190812",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hcw2g:-:*:*:*:*:*:*:*",
"matchCriteriaId": "66A0569A-ADBE-4BA9-9A42-CA41134099B2",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hcw2gv_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "4E7AEDF9-1B0C-4B0B-8F0F-E72946E83AF7",
"versionEndExcluding": "1.000.0000.18.20190409",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hcw2gv:-:*:*:*:*:*:*:*",
"matchCriteriaId": "D6F56435-9D0B-410A-A77D-17D9B3543417",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hcw4g_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "7BF20DCC-A357-4B7D-AD82-7F2865F60A4E",
"versionEndExcluding": "1.000.hw00.21.20190812",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hcw4g:-:*:*:*:*:*:*:*",
"matchCriteriaId": "859CD6B5-8946-408F-B0C2-16F3B564A090",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hdz302d_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "80E7680F-EACF-4A3D-9132-5F0C1034D6F1",
"versionEndExcluding": "1.000.0041.20180530",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hdz302d:-:*:*:*:*:*:*:*",
"matchCriteriaId": "3236AAD2-B29C-4A43-A080-DF01534CD8FD",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hdz302de_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "9FCE5563-C583-438F-89C3-2E784A0BA8A9",
"versionEndExcluding": "1.000.0041.20180530",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hdz302de:-:*:*:*:*:*:*:*",
"matchCriteriaId": "CCF6422D-E221-4B5A-A801-38A13305186F",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hdz302din_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "B3BD56F2-914F-4E71-A361-2FF860249227",
"versionEndExcluding": "1.000.0041.20180530",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hdz302din:-:*:*:*:*:*:*:*",
"matchCriteriaId": "30ABEDE1-5064-4169-AA1A-5F114885910B",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hdz302din-c1_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "7C5B91A7-8CA4-40B9-A39E-C06DCAA5BEE6",
"versionEndExcluding": "1.000.0041.20180530",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hdz302din-c1:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4921E9DF-F2AC-4EDC-B0C9-A25A6FC4096F",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Honeywell equIP and Performance series IP cameras, multiple versions, A vulnerability exists where the affected product allows unauthenticated access to audio streaming over HTTP."
},
{
"lang": "es",
"value": "En las c\u00e1maras IP Honeywell equIP and Performance series, m\u00faltiples versiones, una vulnerabilidad se presenta donde el producto afectado permite el acceso no autenticado a la transmisi\u00f3n de audio mediante HTTP."
}
],
"id": "CVE-2019-18230",
"lastModified": "2026-06-17T02:24:39.843",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2019-10-31T22:15:11.080",
"references": [
{
"source": "ics-cert@hq.dhs.gov",
"tags": [
"Third Party Advisory",
"US Government Resource"
],
"url": "https://www.us-cert.gov/ics/advisories/icsa-19-304-03"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory",
"US Government Resource"
],
"url": "https://www.us-cert.gov/ics/advisories/icsa-19-304-03"
}
],
"sourceIdentifier": "ics-cert@hq.dhs.gov",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-306"
}
],
"source": "ics-cert@hq.dhs.gov",
"type": "Secondary"
},
{
"description": [
{
"lang": "en",
"value": "CWE-306"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
GHSA-VJ77-88VG-HQ2H
Vulnerability from github – Published: 2022-05-24 17:00 – Updated: 2024-04-04 02:37
VLAI
Details
Honeywell equIP and Performance series IP cameras, multiple versions, A vulnerability exists where the affected product allows unauthenticated access to audio streaming over HTTP.
Severity
7.5 (High)
{
"affected": [],
"aliases": [
"CVE-2019-18230"
],
"database_specific": {
"cwe_ids": [
"CWE-306"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2019-10-31T22:15:00Z",
"severity": "HIGH"
},
"details": "Honeywell equIP and Performance series IP cameras, multiple versions, A vulnerability exists where the affected product allows unauthenticated access to audio streaming over HTTP.",
"id": "GHSA-vj77-88vg-hq2h",
"modified": "2024-04-04T02:37:34Z",
"published": "2022-05-24T17:00:15Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-18230"
},
{
"type": "WEB",
"url": "https://www.us-cert.gov/ics/advisories/icsa-19-304-03"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"type": "CVSS_V3"
}
]
}
GSD-2019-18230
Vulnerability from gsd - Updated: 2023-12-13 01:23Details
Honeywell equIP and Performance series IP cameras, multiple versions, A vulnerability exists where the affected product allows unauthenticated access to audio streaming over HTTP.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2019-18230",
"description": "Honeywell equIP and Performance series IP cameras, multiple versions, A vulnerability exists where the affected product allows unauthenticated access to audio streaming over HTTP.",
"id": "GSD-2019-18230"
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2019-18230"
],
"details": "Honeywell equIP and Performance series IP cameras, multiple versions, A vulnerability exists where the affected product allows unauthenticated access to audio streaming over HTTP.",
"id": "GSD-2019-18230",
"modified": "2023-12-13T01:23:50.516191Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "ics-cert@hq.dhs.gov",
"ID": "CVE-2019-18230",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Honeywell equIP \u0026 Performance series IP cameras",
"version": {
"version_data": [
{
"version_value": "equIP Camera,Vulnability fixed from version,H2W2GR1 1.000.0000.18.20190409,H3W2GR1 1.000.HW00.21.20190812,H3W2GR1V 1.000.0000.18.20190409,H3W2GR2 1.000.HW00.21.20190812,H3W4GR1 1.000.HW00.21.20190812,H3W4GR1V 1.000.0000.18.20190409,H4D8GR1 2.420.HW00.9.20180510,H4L2GR1 1.000.0000.18.20190423,H4L2GR1V 1.000.0000.18.20190423,H4L6GR2 1.000.HW02.8.20190813,H4LGGR2 .000.HW04.3.20190813,H4W2GR1 1.000.HW00.21.20190812,H4W2GR1V 1.000.0000.18.20190409,H4W2GR2 1.000.HW00.21.20190812,H4W4GR1 1.000.HW00.21.20190812,H4W4GR1V 1.000.0000.18.20190409,HBD8GR1 2.420.HW00.9.20180510,HBL2GR1 2.420.HW01.33.20190812,HBL2GR1V 1.000.0000.18.20190423,HBL6GR2 1.000.HW04.3.20190813,HBL6GR2 1.000.HW02.8.20190813,HBW2GR1 1.000.HW00.21.20190812, HBW2GR1V 1.000.0000.18.20190409,HBW2GR3 1.000.HW00.21.20190812,HBW2GR3V 1.000.0000.18.20190409,HBW4GR1 1.000.HW00.21.20190812, HBW4GR1V 1.000.0000.18.20190409,HCD8G 2.420.HW00.9.20180510,HCL2G 1.000.0000.18.20190423,HCL2GV 1.000.0000.18.20190423,HCW2G 1.000.HW00.21.20190812,HCW2GV 1.000.0000.18.20190409,HCW4G 1.000.HW00.21.20190812,HDZ302D 1.000.0041.20180530,HDZ302DE 1.000.0041.20180530,HDZ302DIN 1.000.0041.20180530,HDZ302DIN-C1 1.000.0041.20180530,HDZ302DIN-S1 1.000.0041.20180530,HDZ302LIK 1.000.61.1.20180607,HDZ302LIW 1.000.61.1.20180607,HFD6GR1 1.000.HW00.9.20180510,HFD8GR1 1.000.HW00.9.20180510,HM4L8GR1 1.000.HW02.8.20190813,HMBL8GR1 1.000.HW02.8.20190813,Performance Series Vulnability fixed from version,H4D8PR1 1.000.HW01.3.20190820,HFD5PR1 1.000.HW01.1.20190822,HPW2P1 1.000.HW01.3.20190820,HDZP304DI 1.000.HW10.5.20190812,HDZP252DI 1.000.HW02.3.20181109"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Honeywell equIP and Performance series IP cameras, multiple versions, A vulnerability exists where the affected product allows unauthenticated access to audio streaming over HTTP."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-306"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.us-cert.gov/ics/advisories/icsa-19-304-03",
"refsource": "MISC",
"url": "https://www.us-cert.gov/ics/advisories/icsa-19-304-03"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:honeywell:h4d8pr1_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "1.000.hw01.3.20190820",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:honeywell:h4d8pr1:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:honeywell:hfd5pr1_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "1.000.hw01.1.20190822",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:honeywell:hfd5pr1:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:honeywell:hpw2p1_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "1.000.hw01.3.20190820",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:honeywell:hpw2p1:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:honeywell:hdzp304di_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "1.000.hw10.5.20190812",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:honeywell:hdzp304di:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:honeywell:hdzp252di_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "1.000.hw02.3.20181109",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:honeywell:hdzp252di:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:honeywell:hdz302din-s1_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "1.000.0041.20180530",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:honeywell:hdz302din-s1:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:honeywell:hdz302lik_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "1.000.61.1.20180607",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:honeywell:hdz302lik:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:honeywell:hdz302liw_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "1.000.61.1.20180607",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:honeywell:hdz302liw:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:honeywell:hfd6gr1_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "1.000.hw00.9.20180510",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:honeywell:hfd6gr1:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:honeywell:hfd8gr1_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "1.000.hw00.9.20180510",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:honeywell:hfd8gr1:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:honeywell:hm4l8gr1_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "1.000.hw02.8.20190813",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:honeywell:hm4l8gr1:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:honeywell:hmbl8gr1_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "1.000.hw02.8.20190813",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:honeywell:hmbl8gr1:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:honeywell:h2w2gr1_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "1.000.0000.18.20190409",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:honeywell:h2w2gr1:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:honeywell:h3w2gr1_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "1.000.hw00.21.20190812",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:honeywell:h3w2gr1:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:honeywell:h3w2gr1v_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "1.000.0000.18.20190409",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:honeywell:h3w2gr1v:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:honeywell:h3w2gr2_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "1.000.hw00.21.20190812",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:honeywell:h3w2gr2:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:honeywell:h3w4gr1_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "1.000.hw00.21.20190812",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:honeywell:h3w4gr1:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:honeywell:h3w4gr1v_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "1.000.0000.18.20190409",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:honeywell:h3w4gr1v:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:honeywell:h4d8gr1_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "2.420.hw00.9.20180510",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:honeywell:h4d8gr1:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:honeywell:h4l2gr1_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "1.000.0000.18.20190423",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:honeywell:h4l2gr1:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:honeywell:h4l2gr1v_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "1.000.0000.18.20190423",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:honeywell:h4l2gr1v:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:honeywell:h4l6gr2_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "1.000.hw02.8.20190813",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:honeywell:h4l6gr2:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:honeywell:h4lggr2_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "1.000.hw04.3.20190813",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:honeywell:h4lggr2:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:honeywell:h4w2gr1_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "1.000.hw00.21.20190812",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:honeywell:h4w2gr1:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:honeywell:h4w2gr1v_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "1.000.0000.18.20190409",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:honeywell:h4w2gr1v:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:honeywell:h4w2gr2_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "1.000.hw00.21.20190812",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:honeywell:h4w2gr2:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:honeywell:h4w4gr1_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "1.000.hw00.21.20190812",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:honeywell:h4w4gr1:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:honeywell:h4w4gr1v_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "1.000.0000.18.20190409",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:honeywell:h4w4gr1v:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:honeywell:hbd8gr1_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "2.420.hw00.9.20180510",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:honeywell:hbd8gr1:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:honeywell:hbl2gr1_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "2.420.hw01.33.20190812",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:honeywell:hbl2gr1:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:honeywell:hbl2gr1v_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "1.000.0000.18.20190423",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:honeywell:hbl2gr1v:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:honeywell:hbl6gr2_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "1.000.hw04.3.20190813",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:honeywell:hbl6gr2:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:honeywell:hbl6gr2_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "1.000.hw02.8.20190813",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:honeywell:hbl6gr2:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:honeywell:hbw2gr1_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "1.000.hw00.21.20190812",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:honeywell:hbw2gr1:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:honeywell:hbw2gr1v_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "1.000.0000.18.20190409",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:honeywell:hbw2gr1v:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:honeywell:hbw2gr3_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "1.000.hw00.21.20190812",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:honeywell:hbw2gr3:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:honeywell:hbw2gr3v_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "1.000.0000.18.20190409",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:honeywell:hbw2gr3v:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:honeywell:hbw4gr1_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "1.000.hw00.21.20190812",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:honeywell:hbw4gr1:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:honeywell:hbw4gr1v_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "1.000.0000.18.20190409",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:honeywell:hbw4gr1v:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:honeywell:hcd8g_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "2.420.hw00.9.20180510",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:honeywell:hcd8g:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:honeywell:hcl2g_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "1.000.0000.18.20190423",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:honeywell:hcl2g:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:honeywell:hcl2gv_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "1.000.0000.18.20190423",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:honeywell:hcl2gv:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:honeywell:hcw2g_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "1.000.hw00.21.20190812",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:honeywell:hcw2g:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:honeywell:hcw2gv_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "1.000.0000.18.20190409",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:honeywell:hcw2gv:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:honeywell:hcw4g_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "1.000.hw00.21.20190812",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:honeywell:hcw4g:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:honeywell:hdz302d_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "1.000.0041.20180530",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:honeywell:hdz302d:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:honeywell:hdz302de_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "1.000.0041.20180530",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:honeywell:hdz302de:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:honeywell:hdz302din_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "1.000.0041.20180530",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:honeywell:hdz302din:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:honeywell:hdz302din-c1_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "1.000.0041.20180530",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:honeywell:hdz302din-c1:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "ics-cert@hq.dhs.gov",
"ID": "CVE-2019-18230"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "Honeywell equIP and Performance series IP cameras, multiple versions, A vulnerability exists where the affected product allows unauthenticated access to audio streaming over HTTP."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "CWE-306"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.us-cert.gov/ics/advisories/icsa-19-304-03",
"refsource": "MISC",
"tags": [
"Third Party Advisory",
"US Government Resource"
],
"url": "https://www.us-cert.gov/ics/advisories/icsa-19-304-03"
}
]
}
},
"impact": {
"baseMetricV2": {
"acInsufInfo": false,
"cvssV2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "MEDIUM",
"userInteractionRequired": false
},
"baseMetricV3": {
"cvssV3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
},
"lastModifiedDate": "2019-11-05T20:29Z",
"publishedDate": "2019-10-31T22:15Z"
}
}
}
ICSA-19-304-03
Vulnerability from csaf_cisa - Published: 2019-10-31 00:00 - Updated: 2019-10-31 00:00Summary
Honeywell equIP and Performance Series IP Cameras
Notes
CISA Disclaimer: This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
Legal Notice: All information products included in https://us-cert.cisa.gov/ics are provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.
Risk evaluation: Successful exploitation of this vulnerability could result in unauthenticated access.
Recommended Practices: CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.CISA also provides a section for control systems security recommended practices on the ICS webpage onus-cert.gov. Several recommended practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.
Recommended Practices: Additional mitigation guidance and recommended practices are publicly available on the ICS webpage on us-cert.gov in the Technical Information Paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.Organizations observing any suspected malicious activity should follow their established internal procedures and report their findings to CISA for tracking and correlation against other incidents.
Exploitability: No known public exploits specifically target this vulnerability.
7.5 (High)
Affected products
Known affected
49 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
H2W2GR1: <1.000.0000.18.20190409
Honeywell / H2W2GR1
|
<1.000.0000.18.20190409 |
Mitigation
fix
Mitigation
Mitigation
Mitigation
Mitigation
fix
|
|
|
H3W2GR1: <1.000.HW00.21.20190812
Honeywell / H3W2GR1
|
<1.000.HW00.21.20190812 |
Mitigation
fix
Mitigation
Mitigation
Mitigation
Mitigation
fix
|
|
|
H3W2GR1V: <1.000.0000.18.20190409
Honeywell / H3W2GR1V
|
<1.000.0000.18.20190409 |
Mitigation
fix
Mitigation
Mitigation
Mitigation
Mitigation
fix
|
|
|
H3W2GR2: <1.000.HW00.21.20190812
Honeywell / H3W2GR2
|
<1.000.HW00.21.20190812 |
Mitigation
fix
Mitigation
Mitigation
Mitigation
Mitigation
fix
|
|
|
H3W4GR1: <1.000.HW00.21.20190812
Honeywell / H3W4GR1
|
<1.000.HW00.21.20190812 |
Mitigation
fix
Mitigation
Mitigation
Mitigation
Mitigation
fix
|
|
|
H3W4GR1V: <1.000.0000.18.20190409
Honeywell / H3W4GR1V
|
<1.000.0000.18.20190409 |
Mitigation
fix
Mitigation
Mitigation
Mitigation
Mitigation
fix
|
|
|
H4D8GR1: <2.420.HW00.9.20180510
Honeywell / H4D8GR1
|
<2.420.HW00.9.20180510 |
Mitigation
fix
Mitigation
Mitigation
Mitigation
Mitigation
fix
|
|
|
H4L2GR1: <1.000.0000.18.20190423
Honeywell / H4L2GR1
|
<1.000.0000.18.20190423 |
Mitigation
fix
Mitigation
Mitigation
Mitigation
Mitigation
fix
|
|
|
H4L2GR1V: <1.000.0000.18.20190423
Honeywell / H4L2GR1V
|
<1.000.0000.18.20190423 |
Mitigation
fix
Mitigation
Mitigation
Mitigation
Mitigation
fix
|
|
|
H4L6GR2: <1.000.HW02.8.20190813
Honeywell / H4L6GR2
|
<1.000.HW02.8.20190813 |
Mitigation
fix
Mitigation
Mitigation
Mitigation
Mitigation
fix
|
|
|
H4LGGR2: <1.000.HW04.3.20190813
Honeywell / H4LGGR2
|
<1.000.HW04.3.20190813 |
Mitigation
fix
Mitigation
Mitigation
Mitigation
Mitigation
fix
|
|
|
H4W2GR1: <1.000.HW00.21.20190812
Honeywell / H4W2GR1
|
<1.000.HW00.21.20190812 |
Mitigation
fix
Mitigation
Mitigation
Mitigation
Mitigation
fix
|
|
|
H4W2GR1V: <1.000.0000.18.20190409
Honeywell / H4W2GR1V
|
<1.000.0000.18.20190409 |
Mitigation
fix
Mitigation
Mitigation
Mitigation
Mitigation
fix
|
|
|
H4W2GR2: <1.000.HW00.21.20190812
Honeywell / H4W2GR2
|
<1.000.HW00.21.20190812 |
Mitigation
fix
Mitigation
Mitigation
Mitigation
Mitigation
fix
|
|
|
H4W4GR1: <1.000.HW00.21.20190812
Honeywell / H4W4GR1
|
<1.000.HW00.21.20190812 |
Mitigation
fix
Mitigation
Mitigation
Mitigation
Mitigation
fix
|
|
|
H4W4GR1V: <1.000.0000.18.20190409
Honeywell / H4W4GR1V
|
<1.000.0000.18.20190409 |
Mitigation
fix
Mitigation
Mitigation
Mitigation
Mitigation
fix
|
|
|
HBD8GR1: <2.420.HW00.9.20180510
Honeywell / HBD8GR1
|
<2.420.HW00.9.20180510 |
Mitigation
fix
Mitigation
Mitigation
Mitigation
Mitigation
fix
|
|
|
HBL2GR1: <2.420.HW01.33.20190812
Honeywell / HBL2GR1
|
<2.420.HW01.33.20190812 |
Mitigation
fix
Mitigation
Mitigation
Mitigation
Mitigation
fix
|
|
|
HBL2GR1V: <1.000.0000.18.20190423
Honeywell / HBL2GR1V
|
<1.000.0000.18.20190423 |
Mitigation
fix
Mitigation
Mitigation
Mitigation
Mitigation
fix
|
|
|
HBL6GR2: <1.000.HW04.3.20190813
Honeywell / HBL6GR2
|
<1.000.HW04.3.20190813 |
Mitigation
fix
Mitigation
Mitigation
Mitigation
Mitigation
fix
|
|
|
HBL6GR2: <1.000.HW02.8.20190813
Honeywell / HBL6GR2
|
<1.000.HW02.8.20190813 |
Mitigation
fix
Mitigation
Mitigation
Mitigation
Mitigation
fix
|
|
|
HBW2GR1: <1.000.HW00.21.20190812
Honeywell / HBW2GR1
|
<1.000.HW00.21.20190812 |
Mitigation
fix
Mitigation
Mitigation
Mitigation
Mitigation
fix
|
|
|
HBW2GR1V: <1.000.0000.18.20190409
Honeywell / HBW2GR1V
|
<1.000.0000.18.20190409 |
Mitigation
fix
Mitigation
Mitigation
Mitigation
Mitigation
fix
|
|
|
HBW2GR3: <1.000.HW00.21.20190812
Honeywell / HBW2GR3
|
<1.000.HW00.21.20190812 |
Mitigation
fix
Mitigation
Mitigation
Mitigation
Mitigation
fix
|
|
|
HBW2GR3V: <1.000.0000.18.20190409
Honeywell / HBW2GR3V
|
<1.000.0000.18.20190409 |
Mitigation
fix
Mitigation
Mitigation
Mitigation
Mitigation
fix
|
|
|
HBW4GR1: <1.000.HW00.21.20190812
Honeywell / HBW4GR1
|
<1.000.HW00.21.20190812 |
Mitigation
fix
Mitigation
Mitigation
Mitigation
Mitigation
fix
|
|
|
HBW4GR1V: <1.000.0000.18.20190409
Honeywell / HBW4GR1V
|
<1.000.0000.18.20190409 |
Mitigation
fix
Mitigation
Mitigation
Mitigation
Mitigation
fix
|
|
|
HCD8G: <2.420.HW00.9.20180510
Honeywell / HCD8G
|
<2.420.HW00.9.20180510 |
Mitigation
fix
Mitigation
Mitigation
Mitigation
Mitigation
fix
|
|
|
HCL2G: <1.000.0000.18.20190423
Honeywell / HCL2G
|
<1.000.0000.18.20190423 |
Mitigation
fix
Mitigation
Mitigation
Mitigation
Mitigation
fix
|
|
|
HCL2GV: <1.000.0000.18.20190423
Honeywell / HCL2GV
|
<1.000.0000.18.20190423 |
Mitigation
fix
Mitigation
Mitigation
Mitigation
Mitigation
fix
|
|
|
HCW2G: <1.000.HW00.21.20190812
Honeywell / HCW2G
|
<1.000.HW00.21.20190812 |
Mitigation
fix
Mitigation
Mitigation
Mitigation
Mitigation
fix
|
|
|
HCW2GV: <1.000.0000.18.20190409
Honeywell / HCW2GV
|
<1.000.0000.18.20190409 |
Mitigation
fix
Mitigation
Mitigation
Mitigation
Mitigation
fix
|
|
|
HCW4G: <1.000.HW00.21.20190812
Honeywell / HCW4G
|
<1.000.HW00.21.20190812 |
Mitigation
fix
Mitigation
Mitigation
Mitigation
Mitigation
fix
|
|
|
HDZ302D: <1.000.0041.20180530
Honeywell / HDZ302D
|
<1.000.0041.20180530 |
Mitigation
fix
Mitigation
Mitigation
Mitigation
Mitigation
fix
|
|
|
HDZ302DE: <1.000.0041.20180530
Honeywell / HDZ302DE
|
<1.000.0041.20180530 |
Mitigation
fix
Mitigation
Mitigation
Mitigation
Mitigation
fix
|
|
|
HDZ302DIN: <1.000.0041.20180530
Honeywell / HDZ302DIN
|
<1.000.0041.20180530 |
Mitigation
fix
Mitigation
Mitigation
Mitigation
Mitigation
fix
|
|
|
HDZ302DIN-C1: <1.000.0041.20180530
Honeywell / HDZ302DIN-C1
|
<1.000.0041.20180530 |
Mitigation
fix
Mitigation
Mitigation
Mitigation
Mitigation
fix
|
|
|
HDZ302DIN-S1: <1.000.0041.20180530
Honeywell / HDZ302DIN-S1
|
<1.000.0041.20180530 |
Mitigation
fix
Mitigation
Mitigation
Mitigation
Mitigation
fix
|
|
|
HDZ302LIK: <1.000.61.1.20180607
Honeywell / HDZ302LIK
|
<1.000.61.1.20180607 |
Mitigation
fix
Mitigation
Mitigation
Mitigation
Mitigation
fix
|
|
|
HDZ302LIW: <1.000.61.1.20180607
Honeywell / HDZ302LIW
|
<1.000.61.1.20180607 |
Mitigation
fix
Mitigation
Mitigation
Mitigation
Mitigation
fix
|
|
|
HFD6GR1: <1.000.HW00.9.20180510
Honeywell / HFD6GR1
|
<1.000.HW00.9.20180510 |
Mitigation
fix
Mitigation
Mitigation
Mitigation
Mitigation
fix
|
|
|
HFD8GR1: <1.000.HW00.9.20180510
Honeywell / HFD8GR1
|
<1.000.HW00.9.20180510 |
Mitigation
fix
Mitigation
Mitigation
Mitigation
Mitigation
fix
|
|
|
HM4L8GR1: <1.000.HW02.8.20190813
Honeywell / HM4L8GR1
|
<1.000.HW02.8.20190813 |
Mitigation
fix
Mitigation
Mitigation
Mitigation
Mitigation
fix
|
|
|
HMBL8GR1: <1.000.HW02.8.20190813
Honeywell / HMBL8GR1
|
<1.000.HW02.8.20190813 |
Mitigation
fix
Mitigation
Mitigation
Mitigation
Mitigation
fix
|
|
|
H4D8PR1: <1.000.HW01.3.20190820
Honeywell / H4D8PR1
|
<1.000.HW01.3.20190820 |
Mitigation
fix
Mitigation
Mitigation
Mitigation
Mitigation
fix
|
|
|
HFD5PR1: <1.000.HW01.1.20190822
Honeywell / HFD5PR1
|
<1.000.HW01.1.20190822 |
Mitigation
fix
Mitigation
Mitigation
Mitigation
Mitigation
fix
|
|
|
HPW2P1: <1.000.HW01.3.20190820
Honeywell / HPW2P1
|
<1.000.HW01.3.20190820 |
Mitigation
fix
Mitigation
Mitigation
Mitigation
Mitigation
fix
|
|
|
HDZP304DI: <1.000.HW10.5.20190812
Honeywell / HDZP304DI
|
<1.000.HW10.5.20190812 |
Mitigation
fix
Mitigation
Mitigation
Mitigation
Mitigation
fix
|
|
|
HDZP252DI: <1.000.HW02.3.20181109
Honeywell / HDZP252DI
|
<1.000.HW02.3.20181109 |
Mitigation
fix
Mitigation
Mitigation
Mitigation
Mitigation
fix
|
References
6 references
Acknowledgments
Honeywell
{
"document": {
"acknowledgments": [
{
"organization": "Honeywell",
"summary": "reporting this vulnerability to CISA"
}
],
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Disclosure is not limited",
"tlp": {
"label": "WHITE",
"url": "https://us-cert.cisa.gov/tlp/"
}
},
"lang": "en-US",
"notes": [
{
"category": "general",
"text": "This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov",
"title": "CISA Disclaimer"
},
{
"category": "legal_disclaimer",
"text": "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.",
"title": "Legal Notice"
},
{
"category": "summary",
"text": "Successful exploitation of this vulnerability could result in unauthenticated access.",
"title": "Risk evaluation"
},
{
"category": "general",
"text": "CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.CISA also provides a section for control systems security recommended practices on the ICS webpage onus-cert.gov. Several recommended practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "Additional mitigation guidance and recommended practices are publicly available on the ICS webpage on us-cert.gov in the Technical Information Paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.Organizations observing any suspected malicious activity should follow their established internal procedures and report their findings to CISA for tracking and correlation against other incidents.",
"title": "Recommended Practices"
},
{
"category": "other",
"text": "No known public exploits specifically target this vulnerability.",
"title": "Exploitability"
}
],
"publisher": {
"category": "coordinator",
"contact_details": "Email: CISAservicedesk@cisa.dhs.gov;\n Toll Free: 1-888-282-0870",
"name": "CISA",
"namespace": "https://www.cisa.gov/"
},
"references": [
{
"category": "self",
"summary": "ICS Advisory ICSA-19-304-03 JSON",
"url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2019/icsa-19-304-03.json"
},
{
"category": "self",
"summary": "ICS Advisory ICSA-19-304-03 Web Version",
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-19-304-03"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.us-cert.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.us-cert.gov/ics/tips/ICS-TIP-12-146-01B"
}
],
"title": "Honeywell equIP and Performance Series IP Cameras",
"tracking": {
"current_release_date": "2019-10-31T00:00:00.000000Z",
"generator": {
"engine": {
"name": "CISA CSAF Generator",
"version": "1.0.0"
}
},
"id": "ICSA-19-304-03",
"initial_release_date": "2019-10-31T00:00:00.000000Z",
"revision_history": [
{
"date": "2019-10-31T00:00:00.000000Z",
"legacy_version": "Initial",
"number": "1",
"summary": "ICSA-19-304-03 Honeywell equIP and Performance Series IP Cameras"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": " \u003c1.000.0000.18.20190409",
"product": {
"name": "H2W2GR1: \u003c1.000.0000.18.20190409",
"product_id": "CSAFPID-0001"
}
}
],
"category": "product_name",
"name": "H2W2GR1"
},
{
"branches": [
{
"category": "product_version_range",
"name": " \u003c1.000.HW00.21.20190812",
"product": {
"name": "H3W2GR1: \u003c1.000.HW00.21.20190812",
"product_id": "CSAFPID-0002"
}
}
],
"category": "product_name",
"name": "H3W2GR1"
},
{
"branches": [
{
"category": "product_version_range",
"name": " \u003c1.000.0000.18.20190409",
"product": {
"name": "H3W2GR1V: \u003c1.000.0000.18.20190409",
"product_id": "CSAFPID-0003"
}
}
],
"category": "product_name",
"name": "H3W2GR1V"
},
{
"branches": [
{
"category": "product_version_range",
"name": " \u003c1.000.HW00.21.20190812",
"product": {
"name": "H3W2GR2: \u003c1.000.HW00.21.20190812",
"product_id": "CSAFPID-0004"
}
}
],
"category": "product_name",
"name": "H3W2GR2"
},
{
"branches": [
{
"category": "product_version_range",
"name": " \u003c1.000.HW00.21.20190812",
"product": {
"name": "H3W4GR1: \u003c1.000.HW00.21.20190812",
"product_id": "CSAFPID-0005"
}
}
],
"category": "product_name",
"name": "H3W4GR1"
},
{
"branches": [
{
"category": "product_version_range",
"name": " \u003c1.000.0000.18.20190409",
"product": {
"name": "H3W4GR1V: \u003c1.000.0000.18.20190409",
"product_id": "CSAFPID-0006"
}
}
],
"category": "product_name",
"name": "H3W4GR1V"
},
{
"branches": [
{
"category": "product_version_range",
"name": " \u003c2.420.HW00.9.20180510",
"product": {
"name": "H4D8GR1: \u003c2.420.HW00.9.20180510",
"product_id": "CSAFPID-0007"
}
}
],
"category": "product_name",
"name": "H4D8GR1"
},
{
"branches": [
{
"category": "product_version_range",
"name": " \u003c1.000.0000.18.20190423",
"product": {
"name": "H4L2GR1: \u003c1.000.0000.18.20190423",
"product_id": "CSAFPID-0008"
}
}
],
"category": "product_name",
"name": "H4L2GR1"
},
{
"branches": [
{
"category": "product_version_range",
"name": " \u003c1.000.0000.18.20190423",
"product": {
"name": "H4L2GR1V: \u003c1.000.0000.18.20190423",
"product_id": "CSAFPID-0009"
}
}
],
"category": "product_name",
"name": "H4L2GR1V"
},
{
"branches": [
{
"category": "product_version_range",
"name": " \u003c1.000.HW02.8.20190813",
"product": {
"name": "H4L6GR2: \u003c1.000.HW02.8.20190813",
"product_id": "CSAFPID-00010"
}
}
],
"category": "product_name",
"name": "H4L6GR2"
},
{
"branches": [
{
"category": "product_version_range",
"name": " \u003c1.000.HW04.3.20190813",
"product": {
"name": "H4LGGR2: \u003c1.000.HW04.3.20190813",
"product_id": "CSAFPID-00011"
}
}
],
"category": "product_name",
"name": "H4LGGR2"
},
{
"branches": [
{
"category": "product_version_range",
"name": " \u003c1.000.HW00.21.20190812",
"product": {
"name": "H4W2GR1: \u003c1.000.HW00.21.20190812",
"product_id": "CSAFPID-00012"
}
}
],
"category": "product_name",
"name": "H4W2GR1"
},
{
"branches": [
{
"category": "product_version_range",
"name": " \u003c1.000.0000.18.20190409",
"product": {
"name": "H4W2GR1V: \u003c1.000.0000.18.20190409",
"product_id": "CSAFPID-00013"
}
}
],
"category": "product_name",
"name": "H4W2GR1V"
},
{
"branches": [
{
"category": "product_version_range",
"name": " \u003c1.000.HW00.21.20190812",
"product": {
"name": "H4W2GR2: \u003c1.000.HW00.21.20190812",
"product_id": "CSAFPID-00014"
}
}
],
"category": "product_name",
"name": "H4W2GR2"
},
{
"branches": [
{
"category": "product_version_range",
"name": " \u003c1.000.HW00.21.20190812",
"product": {
"name": "H4W4GR1: \u003c1.000.HW00.21.20190812",
"product_id": "CSAFPID-00015"
}
}
],
"category": "product_name",
"name": "H4W4GR1"
},
{
"branches": [
{
"category": "product_version_range",
"name": " \u003c1.000.0000.18.20190409",
"product": {
"name": "H4W4GR1V: \u003c1.000.0000.18.20190409",
"product_id": "CSAFPID-00016"
}
}
],
"category": "product_name",
"name": "H4W4GR1V"
},
{
"branches": [
{
"category": "product_version_range",
"name": " \u003c2.420.HW00.9.20180510",
"product": {
"name": "HBD8GR1: \u003c2.420.HW00.9.20180510",
"product_id": "CSAFPID-00017"
}
}
],
"category": "product_name",
"name": "HBD8GR1"
},
{
"branches": [
{
"category": "product_version_range",
"name": " \u003c2.420.HW01.33.20190812",
"product": {
"name": "HBL2GR1: \u003c2.420.HW01.33.20190812",
"product_id": "CSAFPID-00018"
}
}
],
"category": "product_name",
"name": "HBL2GR1"
},
{
"branches": [
{
"category": "product_version_range",
"name": " \u003c1.000.0000.18.20190423",
"product": {
"name": "HBL2GR1V: \u003c1.000.0000.18.20190423",
"product_id": "CSAFPID-00019"
}
}
],
"category": "product_name",
"name": "HBL2GR1V"
},
{
"branches": [
{
"category": "product_version_range",
"name": " \u003c1.000.HW04.3.20190813",
"product": {
"name": "HBL6GR2: \u003c1.000.HW04.3.20190813",
"product_id": "CSAFPID-00020"
}
}
],
"category": "product_name",
"name": "HBL6GR2"
},
{
"branches": [
{
"category": "product_version_range",
"name": " \u003c1.000.HW02.8.20190813",
"product": {
"name": "HBL6GR2: \u003c1.000.HW02.8.20190813",
"product_id": "CSAFPID-00021"
}
}
],
"category": "product_name",
"name": "HBL6GR2"
},
{
"branches": [
{
"category": "product_version_range",
"name": " \u003c1.000.HW00.21.20190812",
"product": {
"name": "HBW2GR1: \u003c1.000.HW00.21.20190812",
"product_id": "CSAFPID-00022"
}
}
],
"category": "product_name",
"name": "HBW2GR1"
},
{
"branches": [
{
"category": "product_version_range",
"name": " \u003c1.000.0000.18.20190409",
"product": {
"name": "HBW2GR1V: \u003c1.000.0000.18.20190409",
"product_id": "CSAFPID-00023"
}
}
],
"category": "product_name",
"name": "HBW2GR1V"
},
{
"branches": [
{
"category": "product_version_range",
"name": " \u003c1.000.HW00.21.20190812",
"product": {
"name": "HBW2GR3: \u003c1.000.HW00.21.20190812",
"product_id": "CSAFPID-00024"
}
}
],
"category": "product_name",
"name": "HBW2GR3"
},
{
"branches": [
{
"category": "product_version_range",
"name": " \u003c1.000.0000.18.20190409",
"product": {
"name": "HBW2GR3V: \u003c1.000.0000.18.20190409",
"product_id": "CSAFPID-00025"
}
}
],
"category": "product_name",
"name": "HBW2GR3V"
},
{
"branches": [
{
"category": "product_version_range",
"name": " \u003c1.000.HW00.21.20190812",
"product": {
"name": "HBW4GR1: \u003c1.000.HW00.21.20190812",
"product_id": "CSAFPID-00026"
}
}
],
"category": "product_name",
"name": "HBW4GR1"
},
{
"branches": [
{
"category": "product_version_range",
"name": " \u003c1.000.0000.18.20190409",
"product": {
"name": "HBW4GR1V: \u003c1.000.0000.18.20190409",
"product_id": "CSAFPID-00027"
}
}
],
"category": "product_name",
"name": "HBW4GR1V"
},
{
"branches": [
{
"category": "product_version_range",
"name": " \u003c2.420.HW00.9.20180510",
"product": {
"name": "HCD8G: \u003c2.420.HW00.9.20180510",
"product_id": "CSAFPID-00028"
}
}
],
"category": "product_name",
"name": "HCD8G"
},
{
"branches": [
{
"category": "product_version_range",
"name": " \u003c1.000.0000.18.20190423",
"product": {
"name": "HCL2G: \u003c1.000.0000.18.20190423",
"product_id": "CSAFPID-00029"
}
}
],
"category": "product_name",
"name": "HCL2G"
},
{
"branches": [
{
"category": "product_version_range",
"name": " \u003c1.000.0000.18.20190423",
"product": {
"name": "HCL2GV: \u003c1.000.0000.18.20190423",
"product_id": "CSAFPID-00030"
}
}
],
"category": "product_name",
"name": "HCL2GV"
},
{
"branches": [
{
"category": "product_version_range",
"name": " \u003c1.000.HW00.21.20190812",
"product": {
"name": "HCW2G: \u003c1.000.HW00.21.20190812",
"product_id": "CSAFPID-00031"
}
}
],
"category": "product_name",
"name": "HCW2G"
},
{
"branches": [
{
"category": "product_version_range",
"name": " \u003c1.000.0000.18.20190409",
"product": {
"name": "HCW2GV: \u003c1.000.0000.18.20190409",
"product_id": "CSAFPID-00032"
}
}
],
"category": "product_name",
"name": "HCW2GV"
},
{
"branches": [
{
"category": "product_version_range",
"name": " \u003c1.000.HW00.21.20190812",
"product": {
"name": "HCW4G: \u003c1.000.HW00.21.20190812",
"product_id": "CSAFPID-00033"
}
}
],
"category": "product_name",
"name": "HCW4G"
},
{
"branches": [
{
"category": "product_version_range",
"name": " \u003c1.000.0041.20180530",
"product": {
"name": "HDZ302D: \u003c1.000.0041.20180530",
"product_id": "CSAFPID-00034"
}
}
],
"category": "product_name",
"name": "HDZ302D"
},
{
"branches": [
{
"category": "product_version_range",
"name": " \u003c1.000.0041.20180530",
"product": {
"name": "HDZ302DE: \u003c1.000.0041.20180530",
"product_id": "CSAFPID-00035"
}
}
],
"category": "product_name",
"name": "HDZ302DE"
},
{
"branches": [
{
"category": "product_version_range",
"name": " \u003c1.000.0041.20180530",
"product": {
"name": "HDZ302DIN: \u003c1.000.0041.20180530",
"product_id": "CSAFPID-00036"
}
}
],
"category": "product_name",
"name": "HDZ302DIN"
},
{
"branches": [
{
"category": "product_version_range",
"name": " \u003c1.000.0041.20180530",
"product": {
"name": "HDZ302DIN-C1: \u003c1.000.0041.20180530",
"product_id": "CSAFPID-00037"
}
}
],
"category": "product_name",
"name": "HDZ302DIN-C1"
},
{
"branches": [
{
"category": "product_version_range",
"name": " \u003c1.000.0041.20180530",
"product": {
"name": "HDZ302DIN-S1: \u003c1.000.0041.20180530",
"product_id": "CSAFPID-00038"
}
}
],
"category": "product_name",
"name": "HDZ302DIN-S1"
},
{
"branches": [
{
"category": "product_version_range",
"name": " \u003c1.000.61.1.20180607",
"product": {
"name": "HDZ302LIK: \u003c1.000.61.1.20180607",
"product_id": "CSAFPID-00039"
}
}
],
"category": "product_name",
"name": "HDZ302LIK"
},
{
"branches": [
{
"category": "product_version_range",
"name": " \u003c1.000.61.1.20180607",
"product": {
"name": "HDZ302LIW: \u003c1.000.61.1.20180607",
"product_id": "CSAFPID-00040"
}
}
],
"category": "product_name",
"name": "HDZ302LIW"
},
{
"branches": [
{
"category": "product_version_range",
"name": " \u003c1.000.HW00.9.20180510",
"product": {
"name": "HFD6GR1: \u003c1.000.HW00.9.20180510",
"product_id": "CSAFPID-00041"
}
}
],
"category": "product_name",
"name": "HFD6GR1"
},
{
"branches": [
{
"category": "product_version_range",
"name": " \u003c1.000.HW00.9.20180510",
"product": {
"name": "HFD8GR1: \u003c1.000.HW00.9.20180510",
"product_id": "CSAFPID-00042"
}
}
],
"category": "product_name",
"name": "HFD8GR1"
},
{
"branches": [
{
"category": "product_version_range",
"name": " \u003c1.000.HW02.8.20190813",
"product": {
"name": "HM4L8GR1: \u003c1.000.HW02.8.20190813",
"product_id": "CSAFPID-00043"
}
}
],
"category": "product_name",
"name": "HM4L8GR1"
},
{
"branches": [
{
"category": "product_version_range",
"name": " \u003c1.000.HW02.8.20190813",
"product": {
"name": "HMBL8GR1: \u003c1.000.HW02.8.20190813",
"product_id": "CSAFPID-00044"
}
}
],
"category": "product_name",
"name": "HMBL8GR1"
},
{
"branches": [
{
"category": "product_version_range",
"name": " \u003c1.000.HW01.3.20190820",
"product": {
"name": "H4D8PR1: \u003c1.000.HW01.3.20190820",
"product_id": "CSAFPID-00045"
}
}
],
"category": "product_name",
"name": "H4D8PR1"
},
{
"branches": [
{
"category": "product_version_range",
"name": " \u003c1.000.HW01.1.20190822",
"product": {
"name": "HFD5PR1: \u003c1.000.HW01.1.20190822",
"product_id": "CSAFPID-00046"
}
}
],
"category": "product_name",
"name": "HFD5PR1"
},
{
"branches": [
{
"category": "product_version_range",
"name": " \u003c1.000.HW01.3.20190820",
"product": {
"name": "HPW2P1: \u003c1.000.HW01.3.20190820",
"product_id": "CSAFPID-00047"
}
}
],
"category": "product_name",
"name": "HPW2P1"
},
{
"branches": [
{
"category": "product_version_range",
"name": " \u003c1.000.HW10.5.20190812",
"product": {
"name": "HDZP304DI: \u003c1.000.HW10.5.20190812",
"product_id": "CSAFPID-00048"
}
}
],
"category": "product_name",
"name": "HDZP304DI"
},
{
"branches": [
{
"category": "product_version_range",
"name": " \u003c1.000.HW02.3.20181109",
"product": {
"name": "HDZP252DI: \u003c1.000.HW02.3.20181109",
"product_id": "CSAFPID-00049"
}
}
],
"category": "product_name",
"name": "HDZP252DI"
}
],
"category": "vendor",
"name": "Honeywell"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-18230",
"cwe": {
"id": "CWE-306",
"name": "Missing Authentication for Critical Function"
},
"notes": [
{
"category": "summary",
"text": "A vulnerability exists where the affected product allows unauthenticated access to audio streaming over HTTP.CVE-2019-18230 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).",
"title": "Vulnerability Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-00010",
"CSAFPID-00011",
"CSAFPID-00012",
"CSAFPID-00013",
"CSAFPID-00014",
"CSAFPID-00015",
"CSAFPID-00016",
"CSAFPID-00017",
"CSAFPID-00018",
"CSAFPID-00019",
"CSAFPID-00020",
"CSAFPID-00021",
"CSAFPID-00022",
"CSAFPID-00023",
"CSAFPID-00024",
"CSAFPID-00025",
"CSAFPID-00026",
"CSAFPID-00027",
"CSAFPID-00028",
"CSAFPID-00029",
"CSAFPID-00030",
"CSAFPID-00031",
"CSAFPID-00032",
"CSAFPID-00033",
"CSAFPID-00034",
"CSAFPID-00035",
"CSAFPID-00036",
"CSAFPID-00037",
"CSAFPID-00038",
"CSAFPID-00039",
"CSAFPID-00040",
"CSAFPID-00041",
"CSAFPID-00042",
"CSAFPID-00043",
"CSAFPID-00044",
"CSAFPID-00045",
"CSAFPID-00046",
"CSAFPID-00047",
"CSAFPID-00048",
"CSAFPID-00049"
]
},
"references": [
{
"category": "external",
"summary": "web.nvd.nist.gov",
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-18230"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Honeywell has released firmware update packages for all affected products. ",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-00010",
"CSAFPID-00011",
"CSAFPID-00012",
"CSAFPID-00013",
"CSAFPID-00014",
"CSAFPID-00015",
"CSAFPID-00016",
"CSAFPID-00017",
"CSAFPID-00018",
"CSAFPID-00019",
"CSAFPID-00020",
"CSAFPID-00021",
"CSAFPID-00022",
"CSAFPID-00023",
"CSAFPID-00024",
"CSAFPID-00025",
"CSAFPID-00026",
"CSAFPID-00027",
"CSAFPID-00028",
"CSAFPID-00029",
"CSAFPID-00030",
"CSAFPID-00031",
"CSAFPID-00032",
"CSAFPID-00033",
"CSAFPID-00034",
"CSAFPID-00035",
"CSAFPID-00036",
"CSAFPID-00037",
"CSAFPID-00038",
"CSAFPID-00039",
"CSAFPID-00040",
"CSAFPID-00041",
"CSAFPID-00042",
"CSAFPID-00043",
"CSAFPID-00044",
"CSAFPID-00045",
"CSAFPID-00046",
"CSAFPID-00047",
"CSAFPID-00048",
"CSAFPID-00049"
],
"url": "https://mywebtech.honeywell.com/Home"
},
{
"category": "mitigation",
"details": "Update firmware of vulnerable devices per this security notification",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-00010",
"CSAFPID-00011",
"CSAFPID-00012",
"CSAFPID-00013",
"CSAFPID-00014",
"CSAFPID-00015",
"CSAFPID-00016",
"CSAFPID-00017",
"CSAFPID-00018",
"CSAFPID-00019",
"CSAFPID-00020",
"CSAFPID-00021",
"CSAFPID-00022",
"CSAFPID-00023",
"CSAFPID-00024",
"CSAFPID-00025",
"CSAFPID-00026",
"CSAFPID-00027",
"CSAFPID-00028",
"CSAFPID-00029",
"CSAFPID-00030",
"CSAFPID-00031",
"CSAFPID-00032",
"CSAFPID-00033",
"CSAFPID-00034",
"CSAFPID-00035",
"CSAFPID-00036",
"CSAFPID-00037",
"CSAFPID-00038",
"CSAFPID-00039",
"CSAFPID-00040",
"CSAFPID-00041",
"CSAFPID-00042",
"CSAFPID-00043",
"CSAFPID-00044",
"CSAFPID-00045",
"CSAFPID-00046",
"CSAFPID-00047",
"CSAFPID-00048",
"CSAFPID-00049"
]
},
{
"category": "mitigation",
"details": "Isolate their system from the Internet or create additional layers of defense to their system from the Internet by placing the affected hardware behind a firewall or into a DMZ",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-00010",
"CSAFPID-00011",
"CSAFPID-00012",
"CSAFPID-00013",
"CSAFPID-00014",
"CSAFPID-00015",
"CSAFPID-00016",
"CSAFPID-00017",
"CSAFPID-00018",
"CSAFPID-00019",
"CSAFPID-00020",
"CSAFPID-00021",
"CSAFPID-00022",
"CSAFPID-00023",
"CSAFPID-00024",
"CSAFPID-00025",
"CSAFPID-00026",
"CSAFPID-00027",
"CSAFPID-00028",
"CSAFPID-00029",
"CSAFPID-00030",
"CSAFPID-00031",
"CSAFPID-00032",
"CSAFPID-00033",
"CSAFPID-00034",
"CSAFPID-00035",
"CSAFPID-00036",
"CSAFPID-00037",
"CSAFPID-00038",
"CSAFPID-00039",
"CSAFPID-00040",
"CSAFPID-00041",
"CSAFPID-00042",
"CSAFPID-00043",
"CSAFPID-00044",
"CSAFPID-00045",
"CSAFPID-00046",
"CSAFPID-00047",
"CSAFPID-00048",
"CSAFPID-00049"
]
},
{
"category": "mitigation",
"details": "If remote connections to the network are required, consider using a VPN or other means to ensure secure remote connections into the network where the device is located.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-00010",
"CSAFPID-00011",
"CSAFPID-00012",
"CSAFPID-00013",
"CSAFPID-00014",
"CSAFPID-00015",
"CSAFPID-00016",
"CSAFPID-00017",
"CSAFPID-00018",
"CSAFPID-00019",
"CSAFPID-00020",
"CSAFPID-00021",
"CSAFPID-00022",
"CSAFPID-00023",
"CSAFPID-00024",
"CSAFPID-00025",
"CSAFPID-00026",
"CSAFPID-00027",
"CSAFPID-00028",
"CSAFPID-00029",
"CSAFPID-00030",
"CSAFPID-00031",
"CSAFPID-00032",
"CSAFPID-00033",
"CSAFPID-00034",
"CSAFPID-00035",
"CSAFPID-00036",
"CSAFPID-00037",
"CSAFPID-00038",
"CSAFPID-00039",
"CSAFPID-00040",
"CSAFPID-00041",
"CSAFPID-00042",
"CSAFPID-00043",
"CSAFPID-00044",
"CSAFPID-00045",
"CSAFPID-00046",
"CSAFPID-00047",
"CSAFPID-00048",
"CSAFPID-00049"
]
},
{
"category": "mitigation",
"details": "More information on this issue can be found in Honeywell Security Notification SN 2019-09-04 01",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-00010",
"CSAFPID-00011",
"CSAFPID-00012",
"CSAFPID-00013",
"CSAFPID-00014",
"CSAFPID-00015",
"CSAFPID-00016",
"CSAFPID-00017",
"CSAFPID-00018",
"CSAFPID-00019",
"CSAFPID-00020",
"CSAFPID-00021",
"CSAFPID-00022",
"CSAFPID-00023",
"CSAFPID-00024",
"CSAFPID-00025",
"CSAFPID-00026",
"CSAFPID-00027",
"CSAFPID-00028",
"CSAFPID-00029",
"CSAFPID-00030",
"CSAFPID-00031",
"CSAFPID-00032",
"CSAFPID-00033",
"CSAFPID-00034",
"CSAFPID-00035",
"CSAFPID-00036",
"CSAFPID-00037",
"CSAFPID-00038",
"CSAFPID-00039",
"CSAFPID-00040",
"CSAFPID-00041",
"CSAFPID-00042",
"CSAFPID-00043",
"CSAFPID-00044",
"CSAFPID-00045",
"CSAFPID-00046",
"CSAFPID-00047",
"CSAFPID-00048",
"CSAFPID-00049"
],
"url": "https://www.security.honeywell.com/-/media/Security/Resources/PDF/Product-Warranty/Security_Notification_SN_2019-09-04-01_V4-pdf.pdf"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-00010",
"CSAFPID-00011",
"CSAFPID-00012",
"CSAFPID-00013",
"CSAFPID-00014",
"CSAFPID-00015",
"CSAFPID-00016",
"CSAFPID-00017",
"CSAFPID-00018",
"CSAFPID-00019",
"CSAFPID-00020",
"CSAFPID-00021",
"CSAFPID-00022",
"CSAFPID-00023",
"CSAFPID-00024",
"CSAFPID-00025",
"CSAFPID-00026",
"CSAFPID-00027",
"CSAFPID-00028",
"CSAFPID-00029",
"CSAFPID-00030",
"CSAFPID-00031",
"CSAFPID-00032",
"CSAFPID-00033",
"CSAFPID-00034",
"CSAFPID-00035",
"CSAFPID-00036",
"CSAFPID-00037",
"CSAFPID-00038",
"CSAFPID-00039",
"CSAFPID-00040",
"CSAFPID-00041",
"CSAFPID-00042",
"CSAFPID-00043",
"CSAFPID-00044",
"CSAFPID-00045",
"CSAFPID-00046",
"CSAFPID-00047",
"CSAFPID-00048",
"CSAFPID-00049"
]
}
]
}
]
}
VAR-201910-0901
Vulnerability from variot - Updated: 2024-11-23 22:41Honeywell equIP and Performance series IP cameras, multiple versions, A vulnerability exists where the affected product allows unauthenticated access to audio streaming over HTTP. Honeywell equIP H4L2GR1, etc. are all IP cameras from Honeywell. Attackers can use this vulnerability for unauthorized access
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201910-0901",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "h4w4gr1",
"scope": "lt",
"trust": 1.0,
"vendor": "honeywell",
"version": "1.000.hw00.21.20190812"
},
{
"model": "hcd8g",
"scope": "lt",
"trust": 1.0,
"vendor": "honeywell",
"version": "2.420.hw00.9.20180510"
},
{
"model": "hbl2gr1",
"scope": "lt",
"trust": 1.0,
"vendor": "honeywell",
"version": "2.420.hw01.33.20190812"
},
{
"model": "hm4l8gr1",
"scope": "lt",
"trust": 1.0,
"vendor": "honeywell",
"version": "1.000.hw02.8.20190813"
},
{
"model": "hdzp304di",
"scope": "lt",
"trust": 1.0,
"vendor": "honeywell",
"version": "1.000.hw10.5.20190812"
},
{
"model": "hbw4gr1",
"scope": "lt",
"trust": 1.0,
"vendor": "honeywell",
"version": "1.000.hw00.21.20190812"
},
{
"model": "hpw2p1",
"scope": "lt",
"trust": 1.0,
"vendor": "honeywell",
"version": "1.000.hw01.3.20190820"
},
{
"model": "h4d8gr1",
"scope": "lt",
"trust": 1.0,
"vendor": "honeywell",
"version": "2.420.hw00.9.20180510"
},
{
"model": "hbl6gr2",
"scope": "lt",
"trust": 1.0,
"vendor": "honeywell",
"version": "1.000.hw02.8.20190813"
},
{
"model": "h4l2gr1v",
"scope": "lt",
"trust": 1.0,
"vendor": "honeywell",
"version": "1.000.0000.18.20190423"
},
{
"model": "hbd8gr1",
"scope": "lt",
"trust": 1.0,
"vendor": "honeywell",
"version": "2.420.hw00.9.20180510"
},
{
"model": "hcw4g",
"scope": "lt",
"trust": 1.0,
"vendor": "honeywell",
"version": "1.000.hw00.21.20190812"
},
{
"model": "h4d8pr1",
"scope": "lt",
"trust": 1.0,
"vendor": "honeywell",
"version": "1.000.hw01.3.20190820"
},
{
"model": "h4lggr2",
"scope": "lt",
"trust": 1.0,
"vendor": "honeywell",
"version": "1.000.hw04.3.20190813"
},
{
"model": "hdz302din",
"scope": "lt",
"trust": 1.0,
"vendor": "honeywell",
"version": "1.000.0041.20180530"
},
{
"model": "hdz302d",
"scope": "lt",
"trust": 1.0,
"vendor": "honeywell",
"version": "1.000.0041.20180530"
},
{
"model": "hbw2gr3v",
"scope": "lt",
"trust": 1.0,
"vendor": "honeywell",
"version": "1.000.0000.18.20190409"
},
{
"model": "hfd6gr1",
"scope": "lt",
"trust": 1.0,
"vendor": "honeywell",
"version": "1.000.hw00.9.20180510"
},
{
"model": "hbl2gr1v",
"scope": "lt",
"trust": 1.0,
"vendor": "honeywell",
"version": "1.000.0000.18.20190423"
},
{
"model": "h4w2gr1v",
"scope": "lt",
"trust": 1.0,
"vendor": "honeywell",
"version": "1.000.0000.18.20190409"
},
{
"model": "h4l6gr2",
"scope": "lt",
"trust": 1.0,
"vendor": "honeywell",
"version": "1.000.hw02.8.20190813"
},
{
"model": "hbw2gr1v",
"scope": "lt",
"trust": 1.0,
"vendor": "honeywell",
"version": "1.000.0000.18.20190409"
},
{
"model": "hbl6gr2",
"scope": "lt",
"trust": 1.0,
"vendor": "honeywell",
"version": "1.000.hw04.3.20190813"
},
{
"model": "h3w2gr1",
"scope": "lt",
"trust": 1.0,
"vendor": "honeywell",
"version": "1.000.hw00.21.20190812"
},
{
"model": "hbw2gr1",
"scope": "lt",
"trust": 1.0,
"vendor": "honeywell",
"version": "1.000.hw00.21.20190812"
},
{
"model": "h4w4gr1v",
"scope": "lt",
"trust": 1.0,
"vendor": "honeywell",
"version": "1.000.0000.18.20190409"
},
{
"model": "hfd8gr1",
"scope": "lt",
"trust": 1.0,
"vendor": "honeywell",
"version": "1.000.hw00.9.20180510"
},
{
"model": "h3w4gr1",
"scope": "lt",
"trust": 1.0,
"vendor": "honeywell",
"version": "1.000.hw00.21.20190812"
},
{
"model": "hmbl8gr1",
"scope": "lt",
"trust": 1.0,
"vendor": "honeywell",
"version": "1.000.hw02.8.20190813"
},
{
"model": "hdz302de",
"scope": "lt",
"trust": 1.0,
"vendor": "honeywell",
"version": "1.000.0041.20180530"
},
{
"model": "hbw2gr3",
"scope": "lt",
"trust": 1.0,
"vendor": "honeywell",
"version": "1.000.hw00.21.20190812"
},
{
"model": "hdz302lik",
"scope": "lt",
"trust": 1.0,
"vendor": "honeywell",
"version": "1.000.61.1.20180607"
},
{
"model": "hcl2gv",
"scope": "lt",
"trust": 1.0,
"vendor": "honeywell",
"version": "1.000.0000.18.20190423"
},
{
"model": "hfd5pr1",
"scope": "lt",
"trust": 1.0,
"vendor": "honeywell",
"version": "1.000.hw01.1.20190822"
},
{
"model": "hcw2g",
"scope": "lt",
"trust": 1.0,
"vendor": "honeywell",
"version": "1.000.hw00.21.20190812"
},
{
"model": "hdzp252di",
"scope": "lt",
"trust": 1.0,
"vendor": "honeywell",
"version": "1.000.hw02.3.20181109"
},
{
"model": "hcl2g",
"scope": "lt",
"trust": 1.0,
"vendor": "honeywell",
"version": "1.000.0000.18.20190423"
},
{
"model": "hdz302din-c1",
"scope": "lt",
"trust": 1.0,
"vendor": "honeywell",
"version": "1.000.0041.20180530"
},
{
"model": "hdz302liw",
"scope": "lt",
"trust": 1.0,
"vendor": "honeywell",
"version": "1.000.61.1.20180607"
},
{
"model": "hbw4gr1v",
"scope": "lt",
"trust": 1.0,
"vendor": "honeywell",
"version": "1.000.0000.18.20190409"
},
{
"model": "h3w2gr1v",
"scope": "lt",
"trust": 1.0,
"vendor": "honeywell",
"version": "1.000.0000.18.20190409"
},
{
"model": "hcw2gv",
"scope": "lt",
"trust": 1.0,
"vendor": "honeywell",
"version": "1.000.0000.18.20190409"
},
{
"model": "h4w2gr1",
"scope": "lt",
"trust": 1.0,
"vendor": "honeywell",
"version": "1.000.hw00.21.20190812"
},
{
"model": "h4w2gr2",
"scope": "lt",
"trust": 1.0,
"vendor": "honeywell",
"version": "1.000.hw00.21.20190812"
},
{
"model": "hdz302din-s1",
"scope": "lt",
"trust": 1.0,
"vendor": "honeywell",
"version": "1.000.0041.20180530"
},
{
"model": "h4l2gr1",
"scope": "lt",
"trust": 1.0,
"vendor": "honeywell",
"version": "1.000.0000.18.20190423"
},
{
"model": "h3w4gr1v",
"scope": "lt",
"trust": 1.0,
"vendor": "honeywell",
"version": "1.000.0000.18.20190409"
},
{
"model": "h2w2gr1",
"scope": "lt",
"trust": 1.0,
"vendor": "honeywell",
"version": "1.000.0000.18.20190409"
},
{
"model": "h3w2gr2",
"scope": "lt",
"trust": 1.0,
"vendor": "honeywell",
"version": "1.000.hw00.21.20190812"
},
{
"model": "h4d8pr1",
"scope": null,
"trust": 0.8,
"vendor": "honeywell",
"version": null
},
{
"model": "hdz302din\u2212s1",
"scope": null,
"trust": 0.8,
"vendor": "honeywell",
"version": null
},
{
"model": "hdz302lik",
"scope": null,
"trust": 0.8,
"vendor": "honeywell",
"version": null
},
{
"model": "hdz302liw",
"scope": null,
"trust": 0.8,
"vendor": "honeywell",
"version": null
},
{
"model": "hdzp252di",
"scope": null,
"trust": 0.8,
"vendor": "honeywell",
"version": null
},
{
"model": "hdzp304di",
"scope": null,
"trust": 0.8,
"vendor": "honeywell",
"version": null
},
{
"model": "hfd5pr1",
"scope": null,
"trust": 0.8,
"vendor": "honeywell",
"version": null
},
{
"model": "hfd6gr1",
"scope": null,
"trust": 0.8,
"vendor": "honeywell",
"version": null
},
{
"model": "hfd8gr1",
"scope": null,
"trust": 0.8,
"vendor": "honeywell",
"version": null
},
{
"model": "hpw2p1",
"scope": null,
"trust": 0.8,
"vendor": "honeywell",
"version": null
},
{
"model": "performance hdz302din-s1",
"scope": null,
"trust": 0.6,
"vendor": "honeywell",
"version": null
},
{
"model": "performance hdz302lik",
"scope": null,
"trust": 0.6,
"vendor": "honeywell",
"version": null
},
{
"model": "performance hdz302liw",
"scope": null,
"trust": 0.6,
"vendor": "honeywell",
"version": null
},
{
"model": "performance hfd6gr1",
"scope": null,
"trust": 0.6,
"vendor": "honeywell",
"version": null
},
{
"model": "performance hfd8gr1",
"scope": null,
"trust": 0.6,
"vendor": "honeywell",
"version": null
},
{
"model": "performance hm4l8gr1",
"scope": null,
"trust": 0.6,
"vendor": "honeywell",
"version": null
},
{
"model": "performance hmbl8gr1",
"scope": null,
"trust": 0.6,
"vendor": "honeywell",
"version": null
},
{
"model": "equip h3w2gr1",
"scope": null,
"trust": 0.6,
"vendor": "honeywell",
"version": null
},
{
"model": "equip h3w2gr1v",
"scope": null,
"trust": 0.6,
"vendor": "honeywell",
"version": null
},
{
"model": "equip h3w2gr2",
"scope": null,
"trust": 0.6,
"vendor": "honeywell",
"version": null
},
{
"model": "equip h3w4gr1",
"scope": null,
"trust": 0.6,
"vendor": "honeywell",
"version": null
},
{
"model": "equip h3w4gr1v",
"scope": null,
"trust": 0.6,
"vendor": "honeywell",
"version": null
},
{
"model": "equip h4d8gr1",
"scope": null,
"trust": 0.6,
"vendor": "honeywell",
"version": null
},
{
"model": "equip h4l2gr1v",
"scope": null,
"trust": 0.6,
"vendor": "honeywell",
"version": null
},
{
"model": "equip h4l6gr2",
"scope": null,
"trust": 0.6,
"vendor": "honeywell",
"version": null
},
{
"model": "equip h4lggr2",
"scope": null,
"trust": 0.6,
"vendor": "honeywell",
"version": null
},
{
"model": "equip h4w2gr1",
"scope": null,
"trust": 0.6,
"vendor": "honeywell",
"version": null
},
{
"model": "equip h4w2gr1v",
"scope": null,
"trust": 0.6,
"vendor": "honeywell",
"version": null
},
{
"model": "equip h4w2gr2",
"scope": null,
"trust": 0.6,
"vendor": "honeywell",
"version": null
},
{
"model": "equip h4w4gr1",
"scope": null,
"trust": 0.6,
"vendor": "honeywell",
"version": null
},
{
"model": "equip h4w4gr1v",
"scope": null,
"trust": 0.6,
"vendor": "honeywell",
"version": null
},
{
"model": "equip hbd8gr1",
"scope": null,
"trust": 0.6,
"vendor": "honeywell",
"version": null
},
{
"model": "equip hbl2gr1",
"scope": null,
"trust": 0.6,
"vendor": "honeywell",
"version": null
},
{
"model": "equip hbl2gr1v",
"scope": null,
"trust": 0.6,
"vendor": "honeywell",
"version": null
},
{
"model": "equip hbl6gr2",
"scope": null,
"trust": 0.6,
"vendor": "honeywell",
"version": null
},
{
"model": "equip hbw2gr1",
"scope": null,
"trust": 0.6,
"vendor": "honeywell",
"version": null
},
{
"model": "equip hbw2gr1v",
"scope": null,
"trust": 0.6,
"vendor": "honeywell",
"version": null
},
{
"model": "equip hbw2gr3",
"scope": null,
"trust": 0.6,
"vendor": "honeywell",
"version": null
},
{
"model": "equip hbw2gr3v",
"scope": null,
"trust": 0.6,
"vendor": "honeywell",
"version": null
},
{
"model": "h3w2gr1v",
"scope": "eq",
"trust": 0.6,
"vendor": "honeywell",
"version": null
},
{
"model": "hfd6gr1",
"scope": "eq",
"trust": 0.6,
"vendor": "honeywell",
"version": null
},
{
"model": "h3w2gr1",
"scope": "eq",
"trust": 0.6,
"vendor": "honeywell",
"version": null
},
{
"model": "hdz302liw",
"scope": "eq",
"trust": 0.6,
"vendor": "honeywell",
"version": null
},
{
"model": "hmbl8gr1",
"scope": "eq",
"trust": 0.6,
"vendor": "honeywell",
"version": null
},
{
"model": "hm4l8gr1",
"scope": "eq",
"trust": 0.6,
"vendor": "honeywell",
"version": null
},
{
"model": "h3w4gr1",
"scope": "eq",
"trust": 0.6,
"vendor": "honeywell",
"version": null
},
{
"model": "h2w2gr1",
"scope": "eq",
"trust": 0.6,
"vendor": "honeywell",
"version": null
},
{
"model": "hfd8gr1",
"scope": "eq",
"trust": 0.6,
"vendor": "honeywell",
"version": null
},
{
"model": "h3w2gr2",
"scope": "eq",
"trust": 0.6,
"vendor": "honeywell",
"version": null
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2019-39763"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-011478"
},
{
"db": "CNNVD",
"id": "CNNVD-201910-1919"
},
{
"db": "NVD",
"id": "CVE-2019-18230"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/o:honeywell:h4d8pr1_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:honeywell:hdz302din-s1_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:honeywell:hdz302lik_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:honeywell:hdz302liw_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:honeywell:hdzp252di_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:honeywell:hdzp304di_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:honeywell:hfd5pr1_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:honeywell:hfd6gr1_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:honeywell:hfd8gr1_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:honeywell:hpw2p1_firmware",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-011478"
}
]
},
"cve": "CVE-2019-18230",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CVE-2019-18230",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 1.9,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CNVD-2019-39763",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 3.9,
"id": "CVE-2019-18230",
"impactScore": 3.6,
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
{
"attackComplexity": "Low",
"attackVector": "Network",
"author": "NVD",
"availabilityImpact": "None",
"baseScore": 7.5,
"baseSeverity": "High",
"confidentialityImpact": "High",
"exploitabilityScore": null,
"id": "CVE-2019-18230",
"impactScore": null,
"integrityImpact": "None",
"privilegesRequired": "None",
"scope": "Unchanged",
"trust": 0.8,
"userInteraction": "None",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2019-18230",
"trust": 1.0,
"value": "HIGH"
},
{
"author": "NVD",
"id": "CVE-2019-18230",
"trust": 0.8,
"value": "High"
},
{
"author": "CNVD",
"id": "CNVD-2019-39763",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-201910-1919",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "VULMON",
"id": "CVE-2019-18230",
"trust": 0.1,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2019-39763"
},
{
"db": "VULMON",
"id": "CVE-2019-18230"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-011478"
},
{
"db": "CNNVD",
"id": "CNNVD-201910-1919"
},
{
"db": "NVD",
"id": "CVE-2019-18230"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Honeywell equIP and Performance series IP cameras, multiple versions, A vulnerability exists where the affected product allows unauthenticated access to audio streaming over HTTP. Honeywell equIP H4L2GR1, etc. are all IP cameras from Honeywell. Attackers can use this vulnerability for unauthorized access",
"sources": [
{
"db": "NVD",
"id": "CVE-2019-18230"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-011478"
},
{
"db": "CNVD",
"id": "CNVD-2019-39763"
},
{
"db": "VULMON",
"id": "CVE-2019-18230"
}
],
"trust": 2.25
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "ICS CERT",
"id": "ICSA-19-304-03",
"trust": 3.1
},
{
"db": "NVD",
"id": "CVE-2019-18230",
"trust": 3.1
},
{
"db": "JVNDB",
"id": "JVNDB-2019-011478",
"trust": 0.8
},
{
"db": "CNVD",
"id": "CNVD-2019-39763",
"trust": 0.6
},
{
"db": "AUSCERT",
"id": "ESB-2019.4071",
"trust": 0.6
},
{
"db": "CNNVD",
"id": "CNNVD-201910-1919",
"trust": 0.6
},
{
"db": "VULMON",
"id": "CVE-2019-18230",
"trust": 0.1
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2019-39763"
},
{
"db": "VULMON",
"id": "CVE-2019-18230"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-011478"
},
{
"db": "CNNVD",
"id": "CNNVD-201910-1919"
},
{
"db": "NVD",
"id": "CVE-2019-18230"
}
]
},
"id": "VAR-201910-0901",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2019-39763"
}
],
"trust": 1.5770114965517241
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"Network device"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2019-39763"
}
]
},
"last_update_date": "2024-11-23T22:41:19.437000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Top Page",
"trust": 0.8,
"url": "https://www.honeywell.com/"
},
{
"title": "Patch for Honeywell equIP Series and Performance Series IP Camera Access Control Error Vulnerability",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchInfo/show/189245"
},
{
"title": "Honeywell equIP Series and Performance series IP Fixing measures for camera access control error vulnerability",
"trust": 0.6,
"url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=101133"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2019-39763"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-011478"
},
{
"db": "CNNVD",
"id": "CNNVD-201910-1919"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-306",
"trust": 1.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-011478"
},
{
"db": "NVD",
"id": "CVE-2019-18230"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 3.1,
"url": "https://www.us-cert.gov/ics/advisories/icsa-19-304-03"
},
{
"trust": 2.0,
"url": "https://nvd.nist.gov/vuln/detail/cve-2019-18230"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-18230"
},
{
"trust": 0.6,
"url": "https://www.auscert.org.au/bulletins/esb-2019.4071/"
},
{
"trust": 0.1,
"url": "https://cwe.mitre.org/data/definitions/306.html"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov"
},
{
"trust": 0.1,
"url": "https://www.symantec.com/content/symantec/english/en/security-center/vulnerabilities/writeup.html/110684"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2019-39763"
},
{
"db": "VULMON",
"id": "CVE-2019-18230"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-011478"
},
{
"db": "CNNVD",
"id": "CNNVD-201910-1919"
},
{
"db": "NVD",
"id": "CVE-2019-18230"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2019-39763"
},
{
"db": "VULMON",
"id": "CVE-2019-18230"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-011478"
},
{
"db": "CNNVD",
"id": "CNNVD-201910-1919"
},
{
"db": "NVD",
"id": "CVE-2019-18230"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2019-11-08T00:00:00",
"db": "CNVD",
"id": "CNVD-2019-39763"
},
{
"date": "2019-10-31T00:00:00",
"db": "VULMON",
"id": "CVE-2019-18230"
},
{
"date": "2019-11-08T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2019-011478"
},
{
"date": "2019-10-31T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201910-1919"
},
{
"date": "2019-10-31T22:15:11.080000",
"db": "NVD",
"id": "CVE-2019-18230"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2019-11-08T00:00:00",
"db": "CNVD",
"id": "CNVD-2019-39763"
},
{
"date": "2019-11-05T00:00:00",
"db": "VULMON",
"id": "CVE-2019-18230"
},
{
"date": "2019-11-08T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2019-011478"
},
{
"date": "2019-11-06T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201910-1919"
},
{
"date": "2024-11-21T04:32:53.170000",
"db": "NVD",
"id": "CVE-2019-18230"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201910-1919"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Honeywell equIP Series and Performance Series IP Camera Access Control Error Vulnerability",
"sources": [
{
"db": "CNVD",
"id": "CNVD-2019-39763"
},
{
"db": "CNNVD",
"id": "CNNVD-201910-1919"
}
],
"trust": 1.2
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "access control error",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201910-1919"
}
],
"trust": 0.6
}
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…