CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2019-18226
Critical (9.8) in honeywell. EPSS 1.4% chance of exploitation in the next 30 days.
Honeywell equIP series and Performance series IP cameras and recorders, A vulnerability exists in the affected products where IP cameras and recorders have a potential replay attack vulnerability as a weak authentication method is retained for compatibility with legacy products.
Severity
- EPSS
- 1.4% chance of exploitation in the next 30 days; higher than 71% of CVEs (scores of 2026-10-31)
- CWE
- CWE-294
- Published
- Modified
- Record from
- the NVD, synced
Affected
- honeywell:h2w2gr1_firmware
- honeywell:h2w2pc1m_firmware
- honeywell:h2w2per3_firmware
- honeywell:h2w4per3_firmware
- honeywell:h3w2gr1_firmware
- honeywell:h3w2gr1v_firmware
- honeywell:h3w2gr2_firmware
- honeywell:h3w4gr1_firmware
- honeywell:h3w4gr1v_firmware
- honeywell:h4d8gr1_firmware
- honeywell:h4l2gr1_firmware
- honeywell:h4l2gr1v_firmware
- honeywell:h4l6gr2_firmware
- honeywell:h4w2gr1_firmware
- honeywell:h4w2gr1v_firmware
- honeywell:h4w2gr2_firmware
- honeywell:h4w2per2_firmware
- honeywell:h4w2per3_firmware
- honeywell:h4w4gr1_firmware
- honeywell:h4w4gr1v_firmware
- honeywell:h4w4per2_firmware
- honeywell:h4w4per3_firmware
- honeywell:h4w8pr2_firmware
- honeywell:hbd2per1_firmware
- honeywell:hbd8gr1_firmware
- honeywell:hbl2gr1v_firmware
- honeywell:hbl6gr2_firmware
- honeywell:hbw2gr1v_firmware
- honeywell:hbw2gr3v_firmware
- honeywell:hbw2per1_firmware
- honeywell:hbw2per2_firmware
- honeywell:hbw4gr1v_firmware
- honeywell:hbw4per1_firmware
- honeywell:hbw4per2_firmware
- honeywell:hbw4pgr1_firmware
- honeywell:hbw8pr2_firmware
- honeywell:hcd8g_firmware
- honeywell:hcl2g_firmware
- honeywell:hcl2gv_firmware
- honeywell:hcw2g_firmware
- honeywell:hcw2gv_firmware
- honeywell:hcw4g_firmware
- honeywell:hdz302d_firmware
- honeywell:hdz302de_firmware
- honeywell:hdz302din-c1_firmware
- honeywell:hdz302din-s1_firmware
- honeywell:hdz302lik_firmware
- honeywell:hdz302liw_firmware
- honeywell:hdzp252di_firmware
- honeywell:hdzp304di_firmware