Lucene search

K
nvd[email protected]NVD:CVE-2019-18226
HistoryOct 31, 2019 - 10:15 p.m.

CVE-2019-18226

2019-10-3122:15:10
CWE-294
web.nvd.nist.gov
4

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.7

Confidence

High

EPSS

0.002

Percentile

59.6%

Honeywell equIP series and Performance series IP cameras and recorders, A vulnerability exists in the affected products where IP cameras and recorders have a potential replay attack vulnerability as a weak authentication method is retained for compatibility with legacy products.

Affected configurations

Nvd
Node
honeywellh2w2pc1m_firmwareMatch-
AND
honeywellh2w2pc1mMatch-
Node
honeywellh2w2per3_firmwareMatch-
AND
honeywellh2w2per3Match-
Node
honeywellh2w4per3_firmwareMatch-
AND
honeywellh2w4per3Match-
Node
honeywellh4w2per2_firmwareMatch-
AND
honeywellh4w2per2Match-
Node
honeywellh4w2per3_firmwareMatch-
AND
honeywellh4w2per3Match-
Node
honeywellh4w4per2_firmwareMatch-
AND
honeywellh4w4per2Match-
Node
honeywellh4w4per3_firmwareMatch-
AND
honeywellh4w4per3Match-
Node
honeywellh4w8pr2_firmwareMatch-
AND
honeywellh4w8pr2Match-
Node
honeywellhbd2per1_firmwareMatch-
AND
honeywellhbd2per1Match-
Node
honeywellhbw2per1_firmwareMatch-
AND
honeywellhbw2per1Match-
Node
honeywellhbw2per2_firmwareMatch-
AND
honeywellhbw2per2Match-
Node
honeywellhbw4per1_firmwareMatch-
AND
honeywellhbw4per1Match-
Node
honeywellhbw4per2_firmwareMatch-
AND
honeywellhbw4per2Match-
Node
honeywellhbw4pgr1_firmwareMatch-
AND
honeywellhbw4pgr1Match-
Node
honeywellhbw8pr2_firmwareMatch-
AND
honeywellhbw8pr2Match-
Node
honeywellhed2per3_firmwareMatch-
AND
honeywellhed2per3Match-
Node
honeywellhew2per2_firmwareMatch-
AND
honeywellhew2per2Match-
Node
honeywellhew2per3_firmwareMatch-
AND
honeywellhew2per3Match-
Node
honeywellhew4per2b_firmwareMatch-
AND
honeywellhew4per2bMatch-
Node
honeywellhew4per3_firmwareMatch-
AND
honeywellhew4per3Match-
Node
honeywellhew4per3b_firmwareMatch-
AND
honeywellhew4per3bMatch-
Node
honeywellhew4per2b_firmwareMatch-
AND
honeywellhew4per2bMatch-
Node
honeywellhdzp252di_firmwareMatch-
AND
honeywellhdzp252diMatch-
Node
honeywellhdzp304di_firmwareMatch-
AND
honeywellhdzp304diMatch-
Node
honeywellhpw2p1_firmwareMatch-
AND
honeywellhpw2p1Match-
Node
honeywellh2w2gr1_firmwareMatch-
AND
honeywellh2w2gr1Match-
Node
honeywellh3w2gr1v_firmwareMatch-
AND
honeywellh3w2gr1vMatch-
Node
honeywellh3w4gr1v_firmwareMatch-
AND
honeywellh3w4gr1vMatch-
Node
honeywellh3w2gr1_firmwareMatch-
AND
honeywellh3w2gr1Match-
Node
honeywellh3w2gr2_firmwareMatch-
AND
honeywellh3w2gr2Match-
Node
honeywellh3w4gr1_firmwareMatch-
AND
honeywellh3w4gr1Match-
Node
honeywellh4l2gr1v_firmwareMatch-
AND
honeywellh4l2gr1vMatch-
Node
honeywellh4w2gr1_firmwareMatch-
AND
honeywellh4w2gr1Match-
Node
honeywellh4w2gr1v_firmwareMatch-
AND
honeywellh4w2gr1vMatch-
Node
honeywellh4w4gr1v_firmwareMatch-
AND
honeywellh4w4gr1vMatch-
Node
honeywellh4l2gr1_firmwareMatch-
AND
honeywellh4l2gr1Match-
Node
honeywellh4w2gr2_firmwareMatch-
AND
honeywellh4w2gr2Match-
Node
honeywellh4w4gr1_firmwareMatch-
AND
honeywellh4w4gr1Match-
Node
honeywellh4l6gr2_firmwareMatch-
AND
honeywellh4l6gr2Match-
Node
honeywellhm4l8gr1_firmwareMatch-
AND
honeywellhm4l8gr1Match-
Node
honeywellh4d8gr1_firmwareMatch-
AND
honeywellh4d8gr1Match-
Node
honeywellhbl2gr1v_firmwareMatch-
AND
honeywellhbl2gr1vMatch-
Node
honeywellhbw2gr1v_firmwareMatch-
AND
honeywellhbw2gr1vMatch-
Node
honeywellhbw2gr3v_firmwareMatch-
AND
honeywellhbw2gr3vMatch-
Node
honeywellhbw4gr1v_firmwareMatch-
AND
honeywellhbw4gr1vMatch-
Node
honeywellhbl6gr2_firmwareMatch-
AND
honeywellhbl6gr2Match-
Node
honeywellhmbl8gr1_firmwareMatch-
AND
honeywellhmbl8gr1Match-
Node
honeywellhbd8gr1_firmwareMatch-
AND
honeywellhbd8gr1Match-
Node
honeywellhfd6gr1_firmwareMatch-
AND
honeywellhfd6gr1Match-
Node
honeywellhfd8gr1_firmwareMatch-
AND
honeywellhfd8gr1Match-
Node
honeywellhdz302liw_firmwareMatch-
AND
honeywellhdz302liwMatch-
Node
honeywellhdz302lik_firmwareMatch-
AND
honeywellhdz302likMatch-
Node
honeywellhdz302de_firmwareMatch-
AND
honeywellhdz302deMatch-
Node
honeywellhdz302d_firmwareMatch-
AND
honeywellhdz302dMatch-
Node
honeywellhdz302din-c1_firmwareMatch-
AND
honeywellhdz302din-c1Match-
Node
honeywellhdz302din-s1_firmwareMatch-
AND
honeywellhdz302din-s1Match-
Node
honeywellhepz302w0_firmwareMatch-
AND
honeywellhepz302w0Match-
Node
honeywellhcl2gv_firmwareMatch-
AND
honeywellhcl2gvMatch-
Node
honeywellhcl2g_firmwareMatch-
AND
honeywellhcl2gMatch-
Node
honeywellhcw2g_firmwareMatch-
AND
honeywellhcw2gMatch-
Node
honeywellhcw4g_firmwareMatch-
AND
honeywellhcw4gMatch-
Node
honeywellhcd8g_firmwareMatch-
AND
honeywellhcd8gMatch-
Node
honeywellhsw2g1_firmwareMatch-
AND
honeywellhsw2g1Match-
Node
honeywellhswb2g1_firmwareMatch-
AND
honeywellhswb2g1Match-
Node
honeywellhcw2gv_firmwareMatch-
AND
honeywellhcw2gvMatch-
VendorProductVersionCPE
honeywellh2w2pc1m_firmware-cpe:2.3:o:honeywell:h2w2pc1m_firmware:-:*:*:*:*:*:*:*
honeywellh2w2pc1m-cpe:2.3:h:honeywell:h2w2pc1m:-:*:*:*:*:*:*:*
honeywellh2w2per3_firmware-cpe:2.3:o:honeywell:h2w2per3_firmware:-:*:*:*:*:*:*:*
honeywellh2w2per3-cpe:2.3:h:honeywell:h2w2per3:-:*:*:*:*:*:*:*
honeywellh2w4per3_firmware-cpe:2.3:o:honeywell:h2w4per3_firmware:-:*:*:*:*:*:*:*
honeywellh2w4per3-cpe:2.3:h:honeywell:h2w4per3:-:*:*:*:*:*:*:*
honeywellh4w2per2_firmware-cpe:2.3:o:honeywell:h4w2per2_firmware:-:*:*:*:*:*:*:*
honeywellh4w2per2-cpe:2.3:h:honeywell:h4w2per2:-:*:*:*:*:*:*:*
honeywellh4w2per3_firmware-cpe:2.3:o:honeywell:h4w2per3_firmware:-:*:*:*:*:*:*:*
honeywellh4w2per3-cpe:2.3:h:honeywell:h4w2per3:-:*:*:*:*:*:*:*
Rows per page:
1-10 of 1281

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.7

Confidence

High

EPSS

0.002

Percentile

59.6%

Related for NVD:CVE-2019-18226