CVE-2019-18230

Honeywell equIP and Performance series IP cameras, multiple versions, A vulnerability exists where the affected product allows unauthenticated access to audio streaming over HTTP.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
icscertCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 48%
VendorProductVersion
honeywellh4d8pr1_firmware
𝑥
< 1.000.hw01.3.20190820
honeywellhfd5pr1_firmware
𝑥
< 1.000.hw01.1.20190822
honeywellhpw2p1_firmware
𝑥
< 1.000.hw01.3.20190820
honeywellhdzp304di_firmware
𝑥
< 1.000.hw10.5.20190812
honeywellhdzp252di_firmware
𝑥
< 1.000.hw02.3.20181109
honeywellhdz302din-s1_firmware
𝑥
< 1.000.0041.20180530
honeywellhdz302lik_firmware
𝑥
< 1.000.61.1.20180607
honeywellhdz302liw_firmware
𝑥
< 1.000.61.1.20180607
honeywellhfd6gr1_firmware
𝑥
< 1.000.hw00.9.20180510
honeywellhfd8gr1_firmware
𝑥
< 1.000.hw00.9.20180510
honeywellhm4l8gr1_firmware
𝑥
< 1.000.hw02.8.20190813
honeywellhmbl8gr1_firmware
𝑥
< 1.000.hw02.8.20190813
honeywellh2w2gr1_firmware
𝑥
< 1.000.0000.18.20190409
honeywellh3w2gr1_firmware
𝑥
< 1.000.hw00.21.20190812
honeywellh3w2gr1v_firmware
𝑥
< 1.000.0000.18.20190409
honeywellh3w2gr2_firmware
𝑥
< 1.000.hw00.21.20190812
honeywellh3w4gr1_firmware
𝑥
< 1.000.hw00.21.20190812
honeywellh3w4gr1v_firmware
𝑥
< 1.000.0000.18.20190409
honeywellh4d8gr1_firmware
𝑥
< 2.420.hw00.9.20180510
honeywellh4l2gr1_firmware
𝑥
< 1.000.0000.18.20190423
honeywellh4l2gr1v_firmware
𝑥
< 1.000.0000.18.20190423
honeywellh4l6gr2_firmware
𝑥
< 1.000.hw02.8.20190813
honeywellh4lggr2_firmware
𝑥
< 1.000.hw04.3.20190813
honeywellh4w2gr1_firmware
𝑥
< 1.000.hw00.21.20190812
honeywellh4w2gr1v_firmware
𝑥
< 1.000.0000.18.20190409
honeywellh4w2gr2_firmware
𝑥
< 1.000.hw00.21.20190812
honeywellh4w4gr1_firmware
𝑥
< 1.000.hw00.21.20190812
honeywellh4w4gr1v_firmware
𝑥
< 1.000.0000.18.20190409
honeywellhbd8gr1_firmware
𝑥
< 2.420.hw00.9.20180510
honeywellhbl2gr1_firmware
𝑥
< 2.420.hw01.33.20190812
honeywellhbl2gr1v_firmware
𝑥
< 1.000.0000.18.20190423
honeywellhbl6gr2_firmware
𝑥
< 1.000.hw04.3.20190813
honeywellhbl6gr2_firmware
𝑥
< 1.000.hw02.8.20190813
honeywellhbw2gr1_firmware
𝑥
< 1.000.hw00.21.20190812
honeywellhbw2gr1v_firmware
𝑥
< 1.000.0000.18.20190409
honeywellhbw2gr3_firmware
𝑥
< 1.000.hw00.21.20190812
honeywellhbw2gr3v_firmware
𝑥
< 1.000.0000.18.20190409
honeywellhbw4gr1_firmware
𝑥
< 1.000.hw00.21.20190812
honeywellhbw4gr1v_firmware
𝑥
< 1.000.0000.18.20190409
honeywellhcd8g_firmware
𝑥
< 2.420.hw00.9.20180510
honeywellhcl2g_firmware
𝑥
< 1.000.0000.18.20190423
honeywellhcl2gv_firmware
𝑥
< 1.000.0000.18.20190423
honeywellhcw2g_firmware
𝑥
< 1.000.hw00.21.20190812
honeywellhcw2gv_firmware
𝑥
< 1.000.0000.18.20190409
honeywellhcw4g_firmware
𝑥
< 1.000.hw00.21.20190812
honeywellhdz302d_firmware
𝑥
< 1.000.0041.20180530
honeywellhdz302de_firmware
𝑥
< 1.000.0041.20180530
honeywellhdz302din_firmware
𝑥
< 1.000.0041.20180530
honeywellhdz302din-c1_firmware
𝑥
< 1.000.0041.20180530
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://www.us-cert.gov/ics/advisories/icsa-19-304-03
https://www.us-cert.gov/ics/advisories/icsa-19-304-03