CVE-2019-18228 : Honeywell equIP series IP cameras Multiple equIP Series Cameras, A vulnerability

Honeywell equIP series IP cameras Multiple equIP Series Cameras, A vulnerability exists in the affected products where a specially crafted HTTP packet request could result in a denial of service.

Published 2019-10-31 22:15:11

Updated 2020-09-29 00:14:31

Source ICS-CERT

View at NVD, CVE.org

Vulnerability category: Input validationDenial of service

Products affected by CVE-2019-18228

Honeywell » H4w8pr2 Firmware » Version: N/A
cpe:2.3:o:honeywell:h4w8pr2_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » H4w8pr2 » Version: N/A
Honeywell » Hbw8pr2 Firmware » Version: N/A
cpe:2.3:o:honeywell:hbw8pr2_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » Hbw8pr2 » Version: N/A
Honeywell » H2w2pc1m Firmware » Version: N/A
cpe:2.3:o:honeywell:h2w2pc1m_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » H2w2pc1m » Version: N/A
Honeywell » H2w4per3 Firmware » Version: N/A
cpe:2.3:o:honeywell:h2w4per3_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » H2w4per3 » Version: N/A
Honeywell » H2w2per3 Firmware » Version: N/A
cpe:2.3:o:honeywell:h2w2per3_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » H2w2per3 » Version: N/A
Honeywell » Hew2per3 Firmware » Version: N/A
cpe:2.3:o:honeywell:hew2per3_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » Hew2per3 » Version: N/A
Honeywell » Hew4per3b Firmware » Version: N/A
cpe:2.3:o:honeywell:hew4per3b_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » Hew4per3b » Version: N/A
Honeywell » Hbw2per1 Firmware » Version: N/A
cpe:2.3:o:honeywell:hbw2per1_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » Hbw2per1 » Version: N/A
Honeywell » Hew4per2b Firmware » Version: N/A
cpe:2.3:o:honeywell:hew4per2b_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » Hew4per2b » Version: N/A
Honeywell » Hew2per2 Firmware » Version: N/A
cpe:2.3:o:honeywell:hew2per2_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » Hew2per2 » Version: N/A
Honeywell » H4w2per2 Firmware » Version: N/A
cpe:2.3:o:honeywell:h4w2per2_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » H4w2per2 » Version: N/A
Honeywell » Hbw2per2 Firmware » Version: N/A
cpe:2.3:o:honeywell:hbw2per2_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » Hbw2per2 » Version: N/A
Honeywell » H4w2per3 Firmware » Version: N/A
cpe:2.3:o:honeywell:h4w2per3_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » H4w2per3 » Version: N/A
Honeywell » Hpw2p1 Firmware » Version: N/A
cpe:2.3:o:honeywell:hpw2p1_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » Hpw2p1 » Version: N/A
Honeywell » Hdzp304di Firmware » Version: N/A
cpe:2.3:o:honeywell:hdzp304di_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » Hdzp304di » Version: N/A
Honeywell » Hdzp252di Firmware » Version: N/A
cpe:2.3:o:honeywell:hdzp252di_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » Hdzp252di » Version: N/A
Honeywell » H2w2gr1 Firmware » Version: N/A
cpe:2.3:o:honeywell:h2w2gr1_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » H2w2gr1 » Version: N/A
Honeywell » H4w4per2 Firmware » Version: N/A
cpe:2.3:o:honeywell:h4w4per2_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » H4w4per2 » Version: N/A
Honeywell » H4w4per3 Firmware » Version: N/A
cpe:2.3:o:honeywell:h4w4per3_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » H4w4per3 » Version: N/A
Honeywell » Hbd2per1 Firmware » Version: N/A
cpe:2.3:o:honeywell:hbd2per1_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » Hbd2per1 » Version: N/A
Honeywell » Hbw4per1 Firmware » Version: N/A
cpe:2.3:o:honeywell:hbw4per1_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » Hbw4per1 » Version: N/A
Honeywell » Hbw4per2 Firmware » Version: N/A
cpe:2.3:o:honeywell:hbw4per2_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » Hbw4per2 » Version: N/A
Honeywell » Hbw4pgr1 Firmware » Version: N/A
cpe:2.3:o:honeywell:hbw4pgr1_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » Hbw4pgr1 » Version: N/A
Honeywell » Hed2per3 Firmware » Version: N/A
cpe:2.3:o:honeywell:hed2per3_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » Hed2per3 » Version: N/A
Honeywell » Hew4per3 Firmware » Version: N/A
cpe:2.3:o:honeywell:hew4per3_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Honeywell » Hew4per3 » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2019-18228

EPSS FAQ

0.11%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 43 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2019-18228

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
5.0	MEDIUM	AV:N/AC:L/Au:N/C:N/I:N/A:P	10.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Partial
7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	3.9	3.6	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High

CWE ids for CVE-2019-18228

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
Assigned by:
- ics-cert@hq.dhs.gov (Secondary)
- nvd@nist.gov (Primary)

References for CVE-2019-18228

https://www.us-cert.gov/ics/advisories/icsa-19-304-02

Honeywell equIP Series IP Cameras | CISA
Third Party Advisory;US Government Resource

Jump to

Vulnerability Details : CVE-2019-18228

Products affected by CVE-2019-18228

Exploit prediction scoring system (EPSS) score for CVE-2019-18228

CVSS scores for CVE-2019-18228

CWE ids for CVE-2019-18228

References for CVE-2019-18228