CVE-2019-18226 : Honeywell equIP series and Performance series IP cameras and recorders, A vulner

Honeywell equIP series and Performance series IP cameras and recorders, A vulnerability exists in the affected products where IP cameras and recorders have a potential replay attack vulnerability as a weak authentication method is retained for compatibility with legacy products.

Published 2019-10-31 22:15:11

Updated 2020-09-29 00:14:39

Source ICS-CERT

View at NVD, CVE.org

Products affected by CVE-2019-18226

Honeywell » H4w8pr2 Firmware » Version: N/A
cpe:2.3:o:honeywell:h4w8pr2_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » H4w8pr2 » Version: N/A
Honeywell » Hbw8pr2 Firmware » Version: N/A
cpe:2.3:o:honeywell:hbw8pr2_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » Hbw8pr2 » Version: N/A
Honeywell » H2w2pc1m Firmware » Version: N/A
cpe:2.3:o:honeywell:h2w2pc1m_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » H2w2pc1m » Version: N/A
Honeywell » H2w4per3 Firmware » Version: N/A
cpe:2.3:o:honeywell:h2w4per3_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » H2w4per3 » Version: N/A
Honeywell » H2w2per3 Firmware » Version: N/A
cpe:2.3:o:honeywell:h2w2per3_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » H2w2per3 » Version: N/A
Honeywell » Hew2per3 Firmware » Version: N/A
cpe:2.3:o:honeywell:hew2per3_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » Hew2per3 » Version: N/A
Honeywell » Hew4per3b Firmware » Version: N/A
cpe:2.3:o:honeywell:hew4per3b_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » Hew4per3b » Version: N/A
Honeywell » Hbw2per1 Firmware » Version: N/A
cpe:2.3:o:honeywell:hbw2per1_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » Hbw2per1 » Version: N/A
Honeywell » Hew4per2b Firmware » Version: N/A
cpe:2.3:o:honeywell:hew4per2b_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » Hew4per2b » Version: N/A
Honeywell » Hew2per2 Firmware » Version: N/A
cpe:2.3:o:honeywell:hew2per2_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » Hew2per2 » Version: N/A
Honeywell » H4w2per2 Firmware » Version: N/A
cpe:2.3:o:honeywell:h4w2per2_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » H4w2per2 » Version: N/A
Honeywell » Hbw2per2 Firmware » Version: N/A
cpe:2.3:o:honeywell:hbw2per2_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » Hbw2per2 » Version: N/A
Honeywell » H4w2per3 Firmware » Version: N/A
cpe:2.3:o:honeywell:h4w2per3_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » H4w2per3 » Version: N/A
Honeywell » Hpw2p1 Firmware » Version: N/A
cpe:2.3:o:honeywell:hpw2p1_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » Hpw2p1 » Version: N/A
Honeywell » Hdzp304di Firmware » Version: N/A
cpe:2.3:o:honeywell:hdzp304di_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » Hdzp304di » Version: N/A
Honeywell » Hdzp252di Firmware » Version: N/A
cpe:2.3:o:honeywell:hdzp252di_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » Hdzp252di » Version: N/A
Honeywell » Hdz302din-s1 Firmware » Version: N/A
cpe:2.3:o:honeywell:hdz302din-s1_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » Hdz302din-s1 » Version: N/A
Honeywell » Hdz302lik Firmware » Version: N/A
cpe:2.3:o:honeywell:hdz302lik_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » Hdz302lik » Version: N/A
Honeywell » Hdz302liw Firmware » Version: N/A
cpe:2.3:o:honeywell:hdz302liw_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » Hdz302liw » Version: N/A
Honeywell » Hfd6gr1 Firmware » Version: N/A
cpe:2.3:o:honeywell:hfd6gr1_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » Hfd6gr1 » Version: N/A
Honeywell » Hfd8gr1 Firmware » Version: N/A
cpe:2.3:o:honeywell:hfd8gr1_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » Hfd8gr1 » Version: N/A
Honeywell » Hm4l8gr1 Firmware » Version: N/A
cpe:2.3:o:honeywell:hm4l8gr1_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » Hm4l8gr1 » Version: N/A
Honeywell » Hmbl8gr1 Firmware » Version: N/A
cpe:2.3:o:honeywell:hmbl8gr1_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » Hmbl8gr1 » Version: N/A
Honeywell » H2w2gr1 Firmware » Version: N/A
cpe:2.3:o:honeywell:h2w2gr1_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » H2w2gr1 » Version: N/A
Honeywell » H3w2gr1 Firmware » Version: N/A
cpe:2.3:o:honeywell:h3w2gr1_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » H3w2gr1 » Version: N/A
Honeywell » H3w2gr1v Firmware » Version: N/A
cpe:2.3:o:honeywell:h3w2gr1v_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » H3w2gr1v » Version: N/A
Honeywell » H3w2gr2 Firmware » Version: N/A
cpe:2.3:o:honeywell:h3w2gr2_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » H3w2gr2 » Version: N/A
Honeywell » H3w4gr1 Firmware » Version: N/A
cpe:2.3:o:honeywell:h3w4gr1_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » H3w4gr1 » Version: N/A
Honeywell » H3w4gr1v Firmware » Version: N/A
cpe:2.3:o:honeywell:h3w4gr1v_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » H3w4gr1v » Version: N/A
Honeywell » H4d8gr1 Firmware » Version: N/A
cpe:2.3:o:honeywell:h4d8gr1_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » H4d8gr1 » Version: N/A
Honeywell » H4l2gr1 Firmware » Version: N/A
cpe:2.3:o:honeywell:h4l2gr1_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » H4l2gr1 » Version: N/A
Honeywell » H4l2gr1v Firmware » Version: N/A
cpe:2.3:o:honeywell:h4l2gr1v_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » H4l2gr1v » Version: N/A
Honeywell » H4l6gr2 Firmware » Version: N/A
cpe:2.3:o:honeywell:h4l6gr2_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » H4l6gr2 » Version: N/A
Honeywell » H4w2gr1 Firmware » Version: N/A
cpe:2.3:o:honeywell:h4w2gr1_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » H4w2gr1 » Version: N/A
Honeywell » H4w2gr1v Firmware » Version: N/A
cpe:2.3:o:honeywell:h4w2gr1v_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » H4w2gr1v » Version: N/A
Honeywell » H4w2gr2 Firmware » Version: N/A
cpe:2.3:o:honeywell:h4w2gr2_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » H4w2gr2 » Version: N/A
Honeywell » H4w4gr1 Firmware » Version: N/A
cpe:2.3:o:honeywell:h4w4gr1_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » H4w4gr1 » Version: N/A
Honeywell » H4w4gr1v Firmware » Version: N/A
cpe:2.3:o:honeywell:h4w4gr1v_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » H4w4gr1v » Version: N/A
Honeywell » Hbd8gr1 Firmware » Version: N/A
cpe:2.3:o:honeywell:hbd8gr1_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » Hbd8gr1 » Version: N/A
Honeywell » Hbl2gr1v Firmware » Version: N/A
cpe:2.3:o:honeywell:hbl2gr1v_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » Hbl2gr1v » Version: N/A
Honeywell » Hbl6gr2 Firmware » Version: N/A
cpe:2.3:o:honeywell:hbl6gr2_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » Hbl6gr2 » Version: N/A
Honeywell » Hbw2gr1v Firmware » Version: N/A
cpe:2.3:o:honeywell:hbw2gr1v_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » Hbw2gr1v » Version: N/A
Honeywell » Hbw2gr3v Firmware » Version: N/A
cpe:2.3:o:honeywell:hbw2gr3v_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » Hbw2gr3v » Version: N/A
Honeywell » Hbw4gr1v Firmware » Version: N/A
cpe:2.3:o:honeywell:hbw4gr1v_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » Hbw4gr1v » Version: N/A
Honeywell » Hcd8g Firmware » Version: N/A
cpe:2.3:o:honeywell:hcd8g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » Hcd8g » Version: N/A
Honeywell » Hcl2g Firmware » Version: N/A
cpe:2.3:o:honeywell:hcl2g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » Hcl2g » Version: N/A
Honeywell » Hcl2gv Firmware » Version: N/A
cpe:2.3:o:honeywell:hcl2gv_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » Hcl2gv » Version: N/A
Honeywell » Hcw2g Firmware » Version: N/A
cpe:2.3:o:honeywell:hcw2g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » Hcw2g » Version: N/A
Honeywell » Hcw2gv Firmware » Version: N/A
cpe:2.3:o:honeywell:hcw2gv_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » Hcw2gv » Version: N/A
Honeywell » Hcw4g Firmware » Version: N/A
cpe:2.3:o:honeywell:hcw4g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » Hcw4g » Version: N/A
Honeywell » Hdz302d Firmware » Version: N/A
cpe:2.3:o:honeywell:hdz302d_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » Hdz302d » Version: N/A
Honeywell » Hdz302de Firmware » Version: N/A
cpe:2.3:o:honeywell:hdz302de_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » Hdz302de » Version: N/A
Honeywell » Hdz302din-c1 Firmware » Version: N/A
cpe:2.3:o:honeywell:hdz302din-c1_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » Hdz302din-c1 » Version: N/A
Honeywell » H4w4per2 Firmware » Version: N/A
cpe:2.3:o:honeywell:h4w4per2_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » H4w4per2 » Version: N/A
Honeywell » H4w4per3 Firmware » Version: N/A
cpe:2.3:o:honeywell:h4w4per3_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » H4w4per3 » Version: N/A
Honeywell » Hbd2per1 Firmware » Version: N/A
cpe:2.3:o:honeywell:hbd2per1_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » Hbd2per1 » Version: N/A
Honeywell » Hbw4per1 Firmware » Version: N/A
cpe:2.3:o:honeywell:hbw4per1_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » Hbw4per1 » Version: N/A
Honeywell » Hbw4per2 Firmware » Version: N/A
cpe:2.3:o:honeywell:hbw4per2_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » Hbw4per2 » Version: N/A
Honeywell » Hbw4pgr1 Firmware » Version: N/A
cpe:2.3:o:honeywell:hbw4pgr1_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » Hbw4pgr1 » Version: N/A
Honeywell » Hed2per3 Firmware » Version: N/A
cpe:2.3:o:honeywell:hed2per3_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » Hed2per3 » Version: N/A
Honeywell » Hew4per3 Firmware » Version: N/A
cpe:2.3:o:honeywell:hew4per3_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » Hew4per3 » Version: N/A
Honeywell » Hepz302w0 Firmware » Version: N/A
cpe:2.3:o:honeywell:hepz302w0_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » Hepz302w0 » Version: N/A
Honeywell » Hsw2g1 Firmware » Version: N/A
cpe:2.3:o:honeywell:hsw2g1_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » Hsw2g1 » Version: N/A
Honeywell » Hswb2g1 Firmware » Version: N/A
cpe:2.3:o:honeywell:hswb2g1_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » Hswb2g1 » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2019-18226

EPSS FAQ

0.21%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 58 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2019-18226

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P	10.0	6.4	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial
9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2019-18226

CWE-294 Authentication Bypass by Capture-replay

A capture-replay flaw exists when the design of the product makes it possible for a malicious user to sniff network traffic and bypass authentication by replaying it to the server in question to the same effect as the original message (or with minor changes).
Assigned by:
- ics-cert@hq.dhs.gov (Secondary)
- nvd@nist.gov (Primary)

References for CVE-2019-18226

https://www.us-cert.gov/ics/advisories/icsa-19-304-04

Honeywell equIP and Performance Series IP Cameras and Recorders | CISA
Third Party Advisory;US Government Resource

Jump to

Vulnerability Details : CVE-2019-18226

Products affected by CVE-2019-18226

Exploit prediction scoring system (EPSS) score for CVE-2019-18226

CVSS scores for CVE-2019-18226

CWE ids for CVE-2019-18226

References for CVE-2019-18226