CVE-2019-18230: High severity honeywell h4d8pr1 vulnerability
Published Oct 31, 2019
·Updated
Honeywell equIP and Performance series IP cameras, multiple versions, A vulnerability exists where the affected product allows unauthenticated access to audio streaming over HTTP.
Affected Software
97 affected components
Honeywell H4d8pr1 Firmware<1.000.hw01.3.20190820
Honeywell H4d8pr1
Honeywell Hfd5pr1 Firmware<1.000.hw01.1.20190822
Honeywell Hfd5pr1
Honeywell Hpw2p1 Firmware<1.000.hw01.3.20190820
Honeywell HPW2P1
Honeywell Hdzp304di Firmware<1.000.hw10.5.20190812
Honeywell Hdzp304di
Honeywell Hdzp252di Firmware<1.000.hw02.3.20181109
Honeywell HDZP252DI
Honeywell Hdz302din-s1 Firmware<1.000.0041.20180530
Honeywell Hdz302din-s1
Honeywell Hdz302lik Firmware<1.000.61.1.20180607
Honeywell Hdz302lik
Honeywell Hdz302liw Firmware<1.000.61.1.20180607
Honeywell Hdz302liw
Honeywell Hfd6gr1 Firmware<1.000.hw00.9.20180510
Honeywell Hfd6gr1
Honeywell Hfd8gr1 Firmware<1.000.hw00.9.20180510
Honeywell Hfd8gr1
Honeywell Hm4l8gr1 Firmware<1.000.hw02.8.20190813
Honeywell Hm4l8gr1
Honeywell Hmbl8gr1 Firmware<1.000.hw02.8.20190813
Honeywell Hmbl8gr1
Honeywell H2w2gr1 Firmware<1.000.0000.18.20190409
Honeywell H2w2gr1
Honeywell H3w2gr1 Firmware<1.000.hw00.21.20190812
Honeywell H3w2gr1
Honeywell H3w2gr1v Firmware<1.000.0000.18.20190409
Honeywell H3w2gr1v
Honeywell H3w2gr2 Firmware<1.000.hw00.21.20190812
Honeywell H3w2gr2
Honeywell H3w4gr1 Firmware<1.000.hw00.21.20190812
Honeywell H3w4gr1
Honeywell H3w4gr1v Firmware<1.000.0000.18.20190409
Honeywell H3w4gr1v
Honeywell H4d8gr1 Firmware<2.420.hw00.9.20180510
Honeywell H4d8gr1
Honeywell H4l2gr1 Firmware<1.000.0000.18.20190423
Honeywell H4l2gr1
Honeywell H4l2gr1v Firmware<1.000.0000.18.20190423
Honeywell H4l2gr1v
Honeywell H4l6gr2 Firmware<1.000.hw02.8.20190813
Honeywell H4l6gr2
Honeywell H4lggr2 Firmware<1.000.hw04.3.20190813
Honeywell H4lggr2
Honeywell H4w2gr1 Firmware<1.000.hw00.21.20190812
Honeywell H4w2gr1
Honeywell H4w2gr1v Firmware<1.000.0000.18.20190409
Honeywell H4w2gr1v
Honeywell H4w2gr2 Firmware<1.000.hw00.21.20190812
Honeywell H4w2gr2
Honeywell H4w4gr1 Firmware<1.000.hw00.21.20190812
Honeywell H4w4gr1
Honeywell H4w4gr1v Firmware<1.000.0000.18.20190409
Honeywell H4w4gr1v
Honeywell Hbd8gr1 Firmware<2.420.hw00.9.20180510
Honeywell Hbd8gr1
Honeywell Hbl2gr1 Firmware<2.420.hw01.33.20190812
Honeywell Hbl2gr1
Honeywell Hbl2gr1v Firmware<1.000.0000.18.20190423
Honeywell Hbl2gr1v
Honeywell Hbl6gr2 Firmware<1.000.hw04.3.20190813
Honeywell Hbl6gr2
Honeywell Hbl6gr2 Firmware<1.000.hw02.8.20190813
Honeywell Hbw2gr1 Firmware<1.000.hw00.21.20190812
Honeywell Hbw2gr1
Honeywell Hbw2gr1v Firmware<1.000.0000.18.20190409
Honeywell Hbw2gr1v
Honeywell Hbw2gr3 Firmware<1.000.hw00.21.20190812
Honeywell Hbw2gr3
Honeywell Hbw2gr3v Firmware<1.000.0000.18.20190409
Honeywell Hbw2gr3v
Honeywell Hbw4gr1 Firmware<1.000.hw00.21.20190812
Honeywell Hbw4gr1
Honeywell Hbw4gr1v Firmware<1.000.0000.18.20190409
Honeywell Hbw4gr1v
Honeywell Hcd8g Firmware<2.420.hw00.9.20180510
Honeywell Hcd8g
Honeywell Hcl2g Firmware<1.000.0000.18.20190423
Honeywell Hcl2g
Honeywell Hcl2gv Firmware<1.000.0000.18.20190423
Honeywell Hcl2gv
Honeywell Hcw2g Firmware<1.000.hw00.21.20190812
Honeywell Hcw2g
Honeywell Hcw2gv Firmware<1.000.0000.18.20190409
Honeywell Hcw2gv
Honeywell Hcw4g Firmware<1.000.hw00.21.20190812
Honeywell Hcw4g
Honeywell Hdz302d Firmware<1.000.0041.20180530
Honeywell Hdz302d
Honeywell Hdz302de Firmware<1.000.0041.20180530
Honeywell Hdz302de
Honeywell Hdz302din Firmware<1.000.0041.20180530
Honeywell Hdz302din
Honeywell Hdz302din-c1 Firmware<1.000.0041.20180530
Honeywell Hdz302din-c1
Event History
Oct 31, 2019
CVE Published
via MITRE·09:15 PM
Data Sourced
via MITRE·09:15 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2019-18230?
The severity of CVE-2019-18230 is rated as high due to unauthenticated access to sensitive audio streaming.
2
How do I fix CVE-2019-18230?
To fix CVE-2019-18230, upgrade the affected Honeywell equIP or Performance series IP camera firmware to the latest version provided by Honeywell.
3
Which Honeywell camera models are affected by CVE-2019-18230?
CVE-2019-18230 affects multiple models of Honeywell equIP and Performance series IP cameras using specific firmware versions.
4
What type of vulnerability is CVE-2019-18230?
CVE-2019-18230 is an unauthenticated access vulnerability that allows attackers to stream audio over HTTP.
5
What are the potential risks of CVE-2019-18230?
The potential risks of CVE-2019-18230 include unauthorized access to sensitive audio data, privacy breaches, and exposure to further attacks.