CVE-2019-18230
High
Description
Honeywell equIP and Performance series IP cameras, multiple versions, A vulnerability exists where the affected product allows unauthenticated access to audio streaming over HTTP.
SeverityHigh
CVSS7.5
Exploit probability—
ProductHoneywell H4d8pr1 Firmware
PublishedOct 31, 2019
First seenOct 31, 2019
Weakness typeCWE-306Missing authentication for critical function
How to fix
Update
- honeywell h4d8pr1_firmware1.000.hw01.3.20190820 or later
- honeywell hfd5pr1_firmware1.000.hw01.1.20190822 or later
- honeywell hpw2p1_firmware1.000.hw01.3.20190820 or later
- honeywell hdzp304di_firmware1.000.hw10.5.20190812 or later
- honeywell hdzp252di_firmware1.000.hw02.3.20181109 or later
- honeywell hdz302din-s1_firmware1.000.0041.20180530 or later
- honeywell hdz302lik_firmware1.000.61.1.20180607 or later
- honeywell hdz302liw_firmware1.000.61.1.20180607 or later
- honeywell hfd6gr1_firmware1.000.hw00.9.20180510 or later
- honeywell hfd8gr1_firmware1.000.hw00.9.20180510 or later
- honeywell hm4l8gr1_firmware1.000.hw02.8.20190813 or later
- honeywell hmbl8gr1_firmware1.000.hw02.8.20190813 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| honeywell h4d8pr1_firmware | v < 1.000.hw01.3.20190820 | 1.000.hw01.3.20190820 |
| honeywell hfd5pr1_firmware | v < 1.000.hw01.1.20190822 | 1.000.hw01.1.20190822 |
| honeywell hpw2p1_firmware | v < 1.000.hw01.3.20190820 | 1.000.hw01.3.20190820 |
| honeywell hdzp304di_firmware | v < 1.000.hw10.5.20190812 | 1.000.hw10.5.20190812 |
| honeywell hdzp252di_firmware | v < 1.000.hw02.3.20181109 | 1.000.hw02.3.20181109 |
| honeywell hdz302din-s1_firmware | v < 1.000.0041.20180530 | 1.000.0041.20180530 |
| honeywell hdz302lik_firmware | v < 1.000.61.1.20180607 | 1.000.61.1.20180607 |
| honeywell hdz302liw_firmware | v < 1.000.61.1.20180607 | 1.000.61.1.20180607 |
| honeywell hfd6gr1_firmware | v < 1.000.hw00.9.20180510 | 1.000.hw00.9.20180510 |
| honeywell hfd8gr1_firmware | v < 1.000.hw00.9.20180510 | 1.000.hw00.9.20180510 |
| honeywell hm4l8gr1_firmware | v < 1.000.hw02.8.20190813 | 1.000.hw02.8.20190813 |
| honeywell hmbl8gr1_firmware | v < 1.000.hw02.8.20190813 | 1.000.hw02.8.20190813 |
| honeywell h2w2gr1_firmware | v < 1.000.0000.18.20190409 | 1.000.0000.18.20190409 |
| honeywell h3w2gr1_firmware | v < 1.000.hw00.21.20190812 | 1.000.hw00.21.20190812 |
| honeywell h3w2gr1v_firmware | v < 1.000.0000.18.20190409 | 1.000.0000.18.20190409 |
| honeywell h3w2gr2_firmware | v < 1.000.hw00.21.20190812 | 1.000.hw00.21.20190812 |
| honeywell h3w4gr1_firmware | v < 1.000.hw00.21.20190812 | 1.000.hw00.21.20190812 |
| honeywell h3w4gr1v_firmware | v < 1.000.0000.18.20190409 | 1.000.0000.18.20190409 |
| honeywell h4d8gr1_firmware | v < 2.420.hw00.9.20180510 | 2.420.hw00.9.20180510 |
| honeywell h4l2gr1_firmware | v < 1.000.0000.18.20190423 | 1.000.0000.18.20190423 |
| honeywell h4l2gr1v_firmware | v < 1.000.0000.18.20190423 | 1.000.0000.18.20190423 |
| honeywell h4l6gr2_firmware | v < 1.000.hw02.8.20190813 | 1.000.hw02.8.20190813 |
| honeywell h4lggr2_firmware | v < 1.000.hw04.3.20190813 | 1.000.hw04.3.20190813 |
| honeywell h4w2gr1_firmware | v < 1.000.hw00.21.20190812 | 1.000.hw00.21.20190812 |
| honeywell h4w2gr1v_firmware | v < 1.000.0000.18.20190409 | 1.000.0000.18.20190409 |
| honeywell h4w2gr2_firmware | v < 1.000.hw00.21.20190812 | 1.000.hw00.21.20190812 |
| honeywell h4w4gr1_firmware | v < 1.000.hw00.21.20190812 | 1.000.hw00.21.20190812 |
| honeywell h4w4gr1v_firmware | v < 1.000.0000.18.20190409 | 1.000.0000.18.20190409 |
| honeywell hbd8gr1_firmware | v < 2.420.hw00.9.20180510 | 2.420.hw00.9.20180510 |
| honeywell hbl2gr1_firmware | v < 2.420.hw01.33.20190812 | 2.420.hw01.33.20190812 |
| honeywell hbl2gr1v_firmware | v < 1.000.0000.18.20190423 | 1.000.0000.18.20190423 |
| honeywell hbl6gr2_firmware | v < 1.000.hw04.3.20190813, v < 1.000.hw02.8.20190813 | 1.000.hw04.3.20190813, 1.000.hw02.8.20190813 |
| honeywell hbw2gr1_firmware | v < 1.000.hw00.21.20190812 | 1.000.hw00.21.20190812 |
| honeywell hbw2gr1v_firmware | v < 1.000.0000.18.20190409 | 1.000.0000.18.20190409 |
| honeywell hbw2gr3_firmware | v < 1.000.hw00.21.20190812 | 1.000.hw00.21.20190812 |
| honeywell hbw2gr3v_firmware | v < 1.000.0000.18.20190409 | 1.000.0000.18.20190409 |
| honeywell hbw4gr1_firmware | v < 1.000.hw00.21.20190812 | 1.000.hw00.21.20190812 |
| honeywell hbw4gr1v_firmware | v < 1.000.0000.18.20190409 | 1.000.0000.18.20190409 |
| honeywell hcd8g_firmware | v < 2.420.hw00.9.20180510 | 2.420.hw00.9.20180510 |
| honeywell hcl2g_firmware | v < 1.000.0000.18.20190423 | 1.000.0000.18.20190423 |
| honeywell hcl2gv_firmware | v < 1.000.0000.18.20190423 | 1.000.0000.18.20190423 |
| honeywell hcw2g_firmware | v < 1.000.hw00.21.20190812 | 1.000.hw00.21.20190812 |
| honeywell hcw2gv_firmware | v < 1.000.0000.18.20190409 | 1.000.0000.18.20190409 |
| honeywell hcw4g_firmware | v < 1.000.hw00.21.20190812 | 1.000.hw00.21.20190812 |
| honeywell hdz302d_firmware | v < 1.000.0041.20180530 | 1.000.0041.20180530 |
| honeywell hdz302de_firmware | v < 1.000.0041.20180530 | 1.000.0041.20180530 |
| honeywell hdz302din_firmware | v < 1.000.0041.20180530 | 1.000.0041.20180530 |
| honeywell hdz302din-c1_firmware | v < 1.000.0041.20180530 | 1.000.0041.20180530 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.