Missing authentication in Honeywell equIP & Performance series IP cameras
Priority LOW 35CWE-306Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-306.
Summary
Honeywell equIP and Performance series IP cameras, multiple versions, A vulnerability exists where the affected product allows unauthenticated access to audio streaming over HTTP.
Why it matters now
EPSS 0.01132 66th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | Honeywell equIP & Performance series IP cameras | all versions | — | No fix listed | CNA |
- Honeywell equIP & Performance series IP cameras Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 97
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:honeywell:h4d8pr1_firmware:*:*:*:*:*:*:*:* | before 1.000.hw01.3.20190820 | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:h4d8pr1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:hfd5pr1_firmware:*:*:*:*:*:*:*:* | before 1.000.hw01.1.20190822 | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:hfd5pr1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:hpw2p1_firmware:*:*:*:*:*:*:*:* | before 1.000.hw01.3.20190820 | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:hpw2p1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:hdzp304di_firmware:*:*:*:*:*:*:*:* | before 1.000.hw10.5.20190812 | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:hdzp304di:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:hdzp252di_firmware:*:*:*:*:*:*:*:* | before 1.000.hw02.3.20181109 | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:hdzp252di:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
- cpe:2.3:o:honeywell:h4d8pr1_firmware:*:*:*:*:*:*:*:* Versions before 1.000.hw01.3.20190820 Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:h4d8pr1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:hfd5pr1_firmware:*:*:*:*:*:*:*:* Versions before 1.000.hw01.1.20190822 Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:hfd5pr1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:hpw2p1_firmware:*:*:*:*:*:*:*:* Versions before 1.000.hw01.3.20190820 Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:hpw2p1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:hdzp304di_firmware:*:*:*:*:*:*:*:* Versions before 1.000.hw10.5.20190812 Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:hdzp304di:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:hdzp252di_firmware:*:*:*:*:*:*:*:* Versions before 1.000.hw02.3.20181109 Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:hdzp252di:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
Show 87 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:honeywell:hdz302din-s1_firmware:*:*:*:*:*:*:*:* | before 1.000.0041.20180530 | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:hdz302din-s1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:hdz302lik_firmware:*:*:*:*:*:*:*:* | before 1.000.61.1.20180607 | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:hdz302lik:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:hdz302liw_firmware:*:*:*:*:*:*:*:* | before 1.000.61.1.20180607 | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:hdz302liw:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:hfd6gr1_firmware:*:*:*:*:*:*:*:* | before 1.000.hw00.9.20180510 | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:hfd6gr1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:hfd8gr1_firmware:*:*:*:*:*:*:*:* | before 1.000.hw00.9.20180510 | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:hfd8gr1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:hm4l8gr1_firmware:*:*:*:*:*:*:*:* | before 1.000.hw02.8.20190813 | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:hm4l8gr1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:hmbl8gr1_firmware:*:*:*:*:*:*:*:* | before 1.000.hw02.8.20190813 | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:hmbl8gr1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:h2w2gr1_firmware:*:*:*:*:*:*:*:* | before 1.000.0000.18.20190409 | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:h2w2gr1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:h3w2gr1_firmware:*:*:*:*:*:*:*:* | before 1.000.hw00.21.20190812 | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:h3w2gr1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:h3w2gr1v_firmware:*:*:*:*:*:*:*:* | before 1.000.0000.18.20190409 | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:h3w2gr1v:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:h3w2gr2_firmware:*:*:*:*:*:*:*:* | before 1.000.hw00.21.20190812 | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:h3w2gr2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:h3w4gr1_firmware:*:*:*:*:*:*:*:* | before 1.000.hw00.21.20190812 | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:h3w4gr1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:h3w4gr1v_firmware:*:*:*:*:*:*:*:* | before 1.000.0000.18.20190409 | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:h3w4gr1v:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:h4d8gr1_firmware:*:*:*:*:*:*:*:* | before 2.420.hw00.9.20180510 | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:h4d8gr1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:h4l2gr1_firmware:*:*:*:*:*:*:*:* | before 1.000.0000.18.20190423 | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:h4l2gr1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:h4l2gr1v_firmware:*:*:*:*:*:*:*:* | before 1.000.0000.18.20190423 | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:h4l2gr1v:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:h4l6gr2_firmware:*:*:*:*:*:*:*:* | before 1.000.hw02.8.20190813 | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:h4l6gr2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:h4lggr2_firmware:*:*:*:*:*:*:*:* | before 1.000.hw04.3.20190813 | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:h4lggr2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:h4w2gr1_firmware:*:*:*:*:*:*:*:* | before 1.000.hw00.21.20190812 | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:h4w2gr1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:h4w2gr1v_firmware:*:*:*:*:*:*:*:* | before 1.000.0000.18.20190409 | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:h4w2gr1v:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:h4w2gr2_firmware:*:*:*:*:*:*:*:* | before 1.000.hw00.21.20190812 | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:h4w2gr2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:h4w4gr1_firmware:*:*:*:*:*:*:*:* | before 1.000.hw00.21.20190812 | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:h4w4gr1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:h4w4gr1v_firmware:*:*:*:*:*:*:*:* | before 1.000.0000.18.20190409 | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:h4w4gr1v:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:hbd8gr1_firmware:*:*:*:*:*:*:*:* | before 2.420.hw00.9.20180510 | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:hbd8gr1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:hbl2gr1_firmware:*:*:*:*:*:*:*:* | before 2.420.hw01.33.20190812 | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:hbl2gr1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:hbl2gr1v_firmware:*:*:*:*:*:*:*:* | before 1.000.0000.18.20190423 | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:hbl2gr1v:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:hbl6gr2_firmware:*:*:*:*:*:*:*:* | before 1.000.hw04.3.20190813 | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:hbl6gr2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:hbl6gr2_firmware:*:*:*:*:*:*:*:* | before 1.000.hw02.8.20190813 | Vulnerable | Honeywell |
| cpe:2.3:o:honeywell:hbw2gr1_firmware:*:*:*:*:*:*:*:* | before 1.000.hw00.21.20190812 | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:hbw2gr1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:hbw2gr1v_firmware:*:*:*:*:*:*:*:* | before 1.000.0000.18.20190409 | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:hbw2gr1v:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:hbw2gr3_firmware:*:*:*:*:*:*:*:* | before 1.000.hw00.21.20190812 | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:hbw2gr3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:hbw2gr3v_firmware:*:*:*:*:*:*:*:* | before 1.000.0000.18.20190409 | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:hbw2gr3v:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:hbw4gr1_firmware:*:*:*:*:*:*:*:* | before 1.000.hw00.21.20190812 | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:hbw4gr1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:hbw4gr1v_firmware:*:*:*:*:*:*:*:* | before 1.000.0000.18.20190409 | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:hbw4gr1v:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:hcd8g_firmware:*:*:*:*:*:*:*:* | before 2.420.hw00.9.20180510 | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:hcd8g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:hcl2g_firmware:*:*:*:*:*:*:*:* | before 1.000.0000.18.20190423 | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:hcl2g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:hcl2gv_firmware:*:*:*:*:*:*:*:* | before 1.000.0000.18.20190423 | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:hcl2gv:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:hcw2g_firmware:*:*:*:*:*:*:*:* | before 1.000.hw00.21.20190812 | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:hcw2g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:hcw2gv_firmware:*:*:*:*:*:*:*:* | before 1.000.0000.18.20190409 | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:hcw2gv:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:hcw4g_firmware:*:*:*:*:*:*:*:* | before 1.000.hw00.21.20190812 | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:hcw4g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:hdz302d_firmware:*:*:*:*:*:*:*:* | before 1.000.0041.20180530 | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:hdz302d:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:hdz302de_firmware:*:*:*:*:*:*:*:* | before 1.000.0041.20180530 | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:hdz302de:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:hdz302din_firmware:*:*:*:*:*:*:*:* | before 1.000.0041.20180530 | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:hdz302din:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
| cpe:2.3:o:honeywell:hdz302din-c1_firmware:*:*:*:*:*:*:*:* | before 1.000.0041.20180530 | Vulnerable | Honeywell |
| cpe:2.3:h:honeywell:hdz302din-c1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Honeywell |
- cpe:2.3:o:honeywell:hdz302din-s1_firmware:*:*:*:*:*:*:*:* Versions before 1.000.0041.20180530 Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:hdz302din-s1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:hdz302lik_firmware:*:*:*:*:*:*:*:* Versions before 1.000.61.1.20180607 Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:hdz302lik:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:hdz302liw_firmware:*:*:*:*:*:*:*:* Versions before 1.000.61.1.20180607 Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:hdz302liw:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:hfd6gr1_firmware:*:*:*:*:*:*:*:* Versions before 1.000.hw00.9.20180510 Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:hfd6gr1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:hfd8gr1_firmware:*:*:*:*:*:*:*:* Versions before 1.000.hw00.9.20180510 Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:hfd8gr1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:hm4l8gr1_firmware:*:*:*:*:*:*:*:* Versions before 1.000.hw02.8.20190813 Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:hm4l8gr1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:hmbl8gr1_firmware:*:*:*:*:*:*:*:* Versions before 1.000.hw02.8.20190813 Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:hmbl8gr1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:h2w2gr1_firmware:*:*:*:*:*:*:*:* Versions before 1.000.0000.18.20190409 Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:h2w2gr1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:h3w2gr1_firmware:*:*:*:*:*:*:*:* Versions before 1.000.hw00.21.20190812 Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:h3w2gr1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:h3w2gr1v_firmware:*:*:*:*:*:*:*:* Versions before 1.000.0000.18.20190409 Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:h3w2gr1v:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:h3w2gr2_firmware:*:*:*:*:*:*:*:* Versions before 1.000.hw00.21.20190812 Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:h3w2gr2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:h3w4gr1_firmware:*:*:*:*:*:*:*:* Versions before 1.000.hw00.21.20190812 Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:h3w4gr1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:h3w4gr1v_firmware:*:*:*:*:*:*:*:* Versions before 1.000.0000.18.20190409 Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:h3w4gr1v:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:h4d8gr1_firmware:*:*:*:*:*:*:*:* Versions before 2.420.hw00.9.20180510 Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:h4d8gr1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:h4l2gr1_firmware:*:*:*:*:*:*:*:* Versions before 1.000.0000.18.20190423 Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:h4l2gr1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:h4l2gr1v_firmware:*:*:*:*:*:*:*:* Versions before 1.000.0000.18.20190423 Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:h4l2gr1v:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:h4l6gr2_firmware:*:*:*:*:*:*:*:* Versions before 1.000.hw02.8.20190813 Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:h4l6gr2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:h4lggr2_firmware:*:*:*:*:*:*:*:* Versions before 1.000.hw04.3.20190813 Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:h4lggr2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:h4w2gr1_firmware:*:*:*:*:*:*:*:* Versions before 1.000.hw00.21.20190812 Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:h4w2gr1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:h4w2gr1v_firmware:*:*:*:*:*:*:*:* Versions before 1.000.0000.18.20190409 Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:h4w2gr1v:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:h4w2gr2_firmware:*:*:*:*:*:*:*:* Versions before 1.000.hw00.21.20190812 Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:h4w2gr2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:h4w4gr1_firmware:*:*:*:*:*:*:*:* Versions before 1.000.hw00.21.20190812 Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:h4w4gr1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:h4w4gr1v_firmware:*:*:*:*:*:*:*:* Versions before 1.000.0000.18.20190409 Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:h4w4gr1v:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:hbd8gr1_firmware:*:*:*:*:*:*:*:* Versions before 2.420.hw00.9.20180510 Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:hbd8gr1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:hbl2gr1_firmware:*:*:*:*:*:*:*:* Versions before 2.420.hw01.33.20190812 Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:hbl2gr1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:hbl2gr1v_firmware:*:*:*:*:*:*:*:* Versions before 1.000.0000.18.20190423 Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:hbl2gr1v:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:hbl6gr2_firmware:*:*:*:*:*:*:*:* Versions before 1.000.hw04.3.20190813 Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:hbl6gr2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:hbl6gr2_firmware:*:*:*:*:*:*:*:* Versions before 1.000.hw02.8.20190813 Vulnerable ·Honeywell
- cpe:2.3:o:honeywell:hbw2gr1_firmware:*:*:*:*:*:*:*:* Versions before 1.000.hw00.21.20190812 Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:hbw2gr1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:hbw2gr1v_firmware:*:*:*:*:*:*:*:* Versions before 1.000.0000.18.20190409 Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:hbw2gr1v:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:hbw2gr3_firmware:*:*:*:*:*:*:*:* Versions before 1.000.hw00.21.20190812 Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:hbw2gr3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:hbw2gr3v_firmware:*:*:*:*:*:*:*:* Versions before 1.000.0000.18.20190409 Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:hbw2gr3v:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:hbw4gr1_firmware:*:*:*:*:*:*:*:* Versions before 1.000.hw00.21.20190812 Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:hbw4gr1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:hbw4gr1v_firmware:*:*:*:*:*:*:*:* Versions before 1.000.0000.18.20190409 Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:hbw4gr1v:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:hcd8g_firmware:*:*:*:*:*:*:*:* Versions before 2.420.hw00.9.20180510 Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:hcd8g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:hcl2g_firmware:*:*:*:*:*:*:*:* Versions before 1.000.0000.18.20190423 Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:hcl2g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:hcl2gv_firmware:*:*:*:*:*:*:*:* Versions before 1.000.0000.18.20190423 Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:hcl2gv:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:hcw2g_firmware:*:*:*:*:*:*:*:* Versions before 1.000.hw00.21.20190812 Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:hcw2g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:hcw2gv_firmware:*:*:*:*:*:*:*:* Versions before 1.000.0000.18.20190409 Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:hcw2gv:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:hcw4g_firmware:*:*:*:*:*:*:*:* Versions before 1.000.hw00.21.20190812 Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:hcw4g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:hdz302d_firmware:*:*:*:*:*:*:*:* Versions before 1.000.0041.20180530 Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:hdz302d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:hdz302de_firmware:*:*:*:*:*:*:*:* Versions before 1.000.0041.20180530 Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:hdz302de:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:hdz302din_firmware:*:*:*:*:*:*:*:* Versions before 1.000.0041.20180530 Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:hdz302din:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
- cpe:2.3:o:honeywell:hdz302din-c1_firmware:*:*:*:*:*:*:*:* Versions before 1.000.0041.20180530 Vulnerable ·Honeywell
- cpe:2.3:h:honeywell:hdz302din-c1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Honeywell
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2019-18230
- 2026-10-03 Alias added: GHSA-vj77-88vg-hq2h
References
More Honeywell H2w2gr1 Firmware vulnerabilities
- TI-2019-13245 Authentication bypass by capture-replay in Honeywell equIP series cameras, Honeywell… CVSS 3.1CRITICAL 9.8
- TI-2019-13247 Improper input validation in Honeywell equIP series IP cameras CVSS 3.1HIGH 7.5
Sources
- CVE-2019-18230 · CVE Program
- CVE-2019-18230 · NVD
- FIRST EPSS
- GHSA-vj77-88vg-hq2h · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences