Authentication bypass by capture-replay in Honeywell equIP series cameras, Honeywell…
Priority MEDIUM 45CWE-294Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-294.
Summary
Honeywell equIP series and Performance series IP cameras and recorders, A vulnerability exists in the affected products where IP cameras and recorders have a potential replay attack vulnerability as a weak authentication method is retained for compatibility with legacy products.
Why it matters now
EPSS 0.0137 72nd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | Honeywell equIP series cameras, Honeywell Performance series IP cameras, Honeywell recorders | all versions; all versions; all versions | — | No fix listed | CNA |
- Honeywell equIP series cameras, Honeywell Performance series IP cameras, Honeywell recorders Vendor— Affected all versions; all versions; all versions Fixed in — No fix listed CNA
CPE configurations NVD · 128
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:honeywell:h2w2pc1m_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:h2w2pc1m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:h2w2per3_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:h2w2per3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:h2w4per3_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:h2w4per3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:h4w2per2_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:h4w2per2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:h4w2per3_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:h4w2per3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
- cpe:2.3:o:honeywell:h2w2pc1m_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:h2w2pc1m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:h2w2per3_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:h2w2per3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:h2w4per3_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:h2w4per3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:h4w2per2_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:h4w2per2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:h4w2per3_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:h4w2per3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
Show 118 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:honeywell:h4w4per2_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:h4w4per2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:h4w4per3_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:h4w4per3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:h4w8pr2_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:h4w8pr2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:hbd2per1_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:hbd2per1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:hbw2per1_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:hbw2per1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:hbw2per2_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:hbw2per2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:hbw4per1_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:hbw4per1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:hbw4per2_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:hbw4per2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:hbw4pgr1_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:hbw4pgr1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:hbw8pr2_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:hbw8pr2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:hed2per3_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:hed2per3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:hew2per2_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:hew2per2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:hew2per3_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:hew2per3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:hew4per2b_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:hew4per2b:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:hew4per3_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:hew4per3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:hew4per3b_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:hew4per3b:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:hdzp252di_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:hdzp252di:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:hdzp304di_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:hdzp304di:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:hpw2p1_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:hpw2p1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:h2w2gr1_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:h2w2gr1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:h3w2gr1v_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:h3w2gr1v:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:h3w4gr1v_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:h3w4gr1v:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:h3w2gr1_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:h3w2gr1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:h3w2gr2_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:h3w2gr2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:h3w4gr1_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:h3w4gr1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:h4l2gr1v_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:h4l2gr1v:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:h4w2gr1_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:h4w2gr1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:h4w2gr1v_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:h4w2gr1v:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:h4w4gr1v_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:h4w4gr1v:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:h4l2gr1_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:h4l2gr1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:h4w2gr2_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:h4w2gr2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:h4w4gr1_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:h4w4gr1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:h4l6gr2_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:h4l6gr2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:hm4l8gr1_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:hm4l8gr1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:h4d8gr1_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:h4d8gr1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:hbl2gr1v_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:hbl2gr1v:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:hbw2gr1v_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:hbw2gr1v:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:hbw2gr3v_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:hbw2gr3v:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:hbw4gr1v_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:hbw4gr1v:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:hbl6gr2_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:hbl6gr2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:hmbl8gr1_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:hmbl8gr1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:hbd8gr1_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:hbd8gr1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:hfd6gr1_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:hfd6gr1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:hfd8gr1_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:hfd8gr1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:hdz302liw_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:hdz302liw:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:hdz302lik_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:hdz302lik:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:hdz302de_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:hdz302de:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:hdz302d_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:hdz302d:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:hdz302din-c1_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:hdz302din-c1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:hdz302din-s1_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:hdz302din-s1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:hepz302w0_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:hepz302w0:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:hcl2gv_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:hcl2gv:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:hcl2g_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:hcl2g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:hcw2g_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:hcw2g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:hcw4g_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:hcw4g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:hcd8g_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:hcd8g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:hsw2g1_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:hsw2g1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:hswb2g1_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:hswb2g1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:hcw2gv_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:hcw2gv:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
- cpe:2.3:o:honeywell:h4w4per2_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:h4w4per2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:h4w4per3_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:h4w4per3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:h4w8pr2_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:h4w8pr2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:hbd2per1_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:hbd2per1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:hbw2per1_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:hbw2per1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:hbw2per2_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:hbw2per2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:hbw4per1_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:hbw4per1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:hbw4per2_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:hbw4per2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:hbw4pgr1_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:hbw4pgr1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:hbw8pr2_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:hbw8pr2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:hed2per3_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:hed2per3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:hew2per2_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:hew2per2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:hew2per3_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:hew2per3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:hew4per2b_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:hew4per2b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:hew4per3_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:hew4per3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:hew4per3b_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:hew4per3b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:hdzp252di_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:hdzp252di:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:hdzp304di_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:hdzp304di:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:hpw2p1_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:hpw2p1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:h2w2gr1_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:h2w2gr1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:h3w2gr1v_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:h3w2gr1v:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:h3w4gr1v_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:h3w4gr1v:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:h3w2gr1_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:h3w2gr1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:h3w2gr2_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:h3w2gr2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:h3w4gr1_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:h3w4gr1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:h4l2gr1v_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:h4l2gr1v:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:h4w2gr1_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:h4w2gr1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:h4w2gr1v_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:h4w2gr1v:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:h4w4gr1v_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:h4w4gr1v:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:h4l2gr1_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:h4l2gr1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:h4w2gr2_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:h4w2gr2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:h4w4gr1_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:h4w4gr1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:h4l6gr2_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:h4l6gr2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:hm4l8gr1_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:hm4l8gr1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:h4d8gr1_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:h4d8gr1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:hbl2gr1v_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:hbl2gr1v:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:hbw2gr1v_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:hbw2gr1v:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:hbw2gr3v_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:hbw2gr3v:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:hbw4gr1v_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:hbw4gr1v:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:hbl6gr2_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:hbl6gr2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:hmbl8gr1_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:hmbl8gr1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:hbd8gr1_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:hbd8gr1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:hfd6gr1_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:hfd6gr1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:hfd8gr1_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:hfd8gr1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:hdz302liw_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:hdz302liw:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:hdz302lik_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:hdz302lik:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:hdz302de_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:hdz302de:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:hdz302d_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:hdz302d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:hdz302din-c1_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:hdz302din-c1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:hdz302din-s1_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:hdz302din-s1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:hepz302w0_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:hepz302w0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:hcl2gv_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:hcl2gv:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:hcl2g_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:hcl2g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:hcw2g_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:hcw2g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:hcw4g_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:hcw4g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:hcd8g_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:hcd8g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:hsw2g1_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:hsw2g1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:hswb2g1_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:hswb2g1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:hcw2gv_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:hcw2gv:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2019-18226
- 2026-10-03 Alias added: GHSA-j9vx-r62j-mx34
References
More Honeywell H2w2gr1 Firmware vulnerabilities
- TI-2019-13247 Improper input validation in Honeywell equIP series IP cameras CVSS 3.1HIGH 7.5
- TI-2019-13249 Missing authentication in Honeywell equIP & Performance series IP cameras CVSS 3.1HIGH 7.5
Sources
- CVE-2019-18226 · CVE Program
- CVE-2019-18226 · NVD
- FIRST EPSS
- GHSA-j9vx-r62j-mx34 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences