Vulnerability-Lookup

ICSA-19-304-03

Vulnerability from csaf_cisa - Published: 2019-10-31 00:00 - Updated: 2019-10-31 00:00

Summary

Honeywell equIP and Performance Series IP Cameras

Notes

CISA Disclaimer: This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov

Legal Notice: All information products included in https://us-cert.cisa.gov/ics are provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.

Risk evaluation: Successful exploitation of this vulnerability could result in unauthenticated access.

Recommended Practices: CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.CISA also provides a section for control systems security recommended practices on the ICS webpage onus-cert.gov. Several recommended practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.

Recommended Practices: Additional mitigation guidance and recommended practices are publicly available on the ICS webpage on us-cert.gov in the Technical Information Paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.Organizations observing any suspected malicious activity should follow their established internal procedures and report their findings to CISA for tracking and correlation against other incidents.

Exploitability: No known public exploits specifically target this vulnerability.

CVE-2019-18230

7.5 (High)


                        
                          CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE-306 - Missing Authentication for Critical Function

Affected products

Known affected 49 products

Product	Version	Remediation
H2W2GR1: <1.000.0000.18.20190409 Honeywell / H2W2GR1	<1.000.0000.18.20190409	Mitigation fix Mitigation Mitigation Mitigation Mitigation fix
H3W2GR1: <1.000.HW00.21.20190812 Honeywell / H3W2GR1	<1.000.HW00.21.20190812	Mitigation fix Mitigation Mitigation Mitigation Mitigation fix
H3W2GR1V: <1.000.0000.18.20190409 Honeywell / H3W2GR1V	<1.000.0000.18.20190409	Mitigation fix Mitigation Mitigation Mitigation Mitigation fix
H3W2GR2: <1.000.HW00.21.20190812 Honeywell / H3W2GR2	<1.000.HW00.21.20190812	Mitigation fix Mitigation Mitigation Mitigation Mitigation fix
H3W4GR1: <1.000.HW00.21.20190812 Honeywell / H3W4GR1	<1.000.HW00.21.20190812	Mitigation fix Mitigation Mitigation Mitigation Mitigation fix
H3W4GR1V: <1.000.0000.18.20190409 Honeywell / H3W4GR1V	<1.000.0000.18.20190409	Mitigation fix Mitigation Mitigation Mitigation Mitigation fix
H4D8GR1: <2.420.HW00.9.20180510 Honeywell / H4D8GR1	<2.420.HW00.9.20180510	Mitigation fix Mitigation Mitigation Mitigation Mitigation fix
H4L2GR1: <1.000.0000.18.20190423 Honeywell / H4L2GR1	<1.000.0000.18.20190423	Mitigation fix Mitigation Mitigation Mitigation Mitigation fix
H4L2GR1V: <1.000.0000.18.20190423 Honeywell / H4L2GR1V	<1.000.0000.18.20190423	Mitigation fix Mitigation Mitigation Mitigation Mitigation fix
H4L6GR2: <1.000.HW02.8.20190813 Honeywell / H4L6GR2	<1.000.HW02.8.20190813	Mitigation fix Mitigation Mitigation Mitigation Mitigation fix
H4LGGR2: <1.000.HW04.3.20190813 Honeywell / H4LGGR2	<1.000.HW04.3.20190813	Mitigation fix Mitigation Mitigation Mitigation Mitigation fix
H4W2GR1: <1.000.HW00.21.20190812 Honeywell / H4W2GR1	<1.000.HW00.21.20190812	Mitigation fix Mitigation Mitigation Mitigation Mitigation fix
H4W2GR1V: <1.000.0000.18.20190409 Honeywell / H4W2GR1V	<1.000.0000.18.20190409	Mitigation fix Mitigation Mitigation Mitigation Mitigation fix
H4W2GR2: <1.000.HW00.21.20190812 Honeywell / H4W2GR2	<1.000.HW00.21.20190812	Mitigation fix Mitigation Mitigation Mitigation Mitigation fix
H4W4GR1: <1.000.HW00.21.20190812 Honeywell / H4W4GR1	<1.000.HW00.21.20190812	Mitigation fix Mitigation Mitigation Mitigation Mitigation fix
H4W4GR1V: <1.000.0000.18.20190409 Honeywell / H4W4GR1V	<1.000.0000.18.20190409	Mitigation fix Mitigation Mitigation Mitigation Mitigation fix
HBD8GR1: <2.420.HW00.9.20180510 Honeywell / HBD8GR1	<2.420.HW00.9.20180510	Mitigation fix Mitigation Mitigation Mitigation Mitigation fix
HBL2GR1: <2.420.HW01.33.20190812 Honeywell / HBL2GR1	<2.420.HW01.33.20190812	Mitigation fix Mitigation Mitigation Mitigation Mitigation fix
HBL2GR1V: <1.000.0000.18.20190423 Honeywell / HBL2GR1V	<1.000.0000.18.20190423	Mitigation fix Mitigation Mitigation Mitigation Mitigation fix
HBL6GR2: <1.000.HW04.3.20190813 Honeywell / HBL6GR2	<1.000.HW04.3.20190813	Mitigation fix Mitigation Mitigation Mitigation Mitigation fix
HBL6GR2: <1.000.HW02.8.20190813 Honeywell / HBL6GR2	<1.000.HW02.8.20190813	Mitigation fix Mitigation Mitigation Mitigation Mitigation fix
HBW2GR1: <1.000.HW00.21.20190812 Honeywell / HBW2GR1	<1.000.HW00.21.20190812	Mitigation fix Mitigation Mitigation Mitigation Mitigation fix
HBW2GR1V: <1.000.0000.18.20190409 Honeywell / HBW2GR1V	<1.000.0000.18.20190409	Mitigation fix Mitigation Mitigation Mitigation Mitigation fix
HBW2GR3: <1.000.HW00.21.20190812 Honeywell / HBW2GR3	<1.000.HW00.21.20190812	Mitigation fix Mitigation Mitigation Mitigation Mitigation fix
HBW2GR3V: <1.000.0000.18.20190409 Honeywell / HBW2GR3V	<1.000.0000.18.20190409	Mitigation fix Mitigation Mitigation Mitigation Mitigation fix
HBW4GR1: <1.000.HW00.21.20190812 Honeywell / HBW4GR1	<1.000.HW00.21.20190812	Mitigation fix Mitigation Mitigation Mitigation Mitigation fix
HBW4GR1V: <1.000.0000.18.20190409 Honeywell / HBW4GR1V	<1.000.0000.18.20190409	Mitigation fix Mitigation Mitigation Mitigation Mitigation fix
HCD8G: <2.420.HW00.9.20180510 Honeywell / HCD8G	<2.420.HW00.9.20180510	Mitigation fix Mitigation Mitigation Mitigation Mitigation fix
HCL2G: <1.000.0000.18.20190423 Honeywell / HCL2G	<1.000.0000.18.20190423	Mitigation fix Mitigation Mitigation Mitigation Mitigation fix
HCL2GV: <1.000.0000.18.20190423 Honeywell / HCL2GV	<1.000.0000.18.20190423	Mitigation fix Mitigation Mitigation Mitigation Mitigation fix
HCW2G: <1.000.HW00.21.20190812 Honeywell / HCW2G	<1.000.HW00.21.20190812	Mitigation fix Mitigation Mitigation Mitigation Mitigation fix
HCW2GV: <1.000.0000.18.20190409 Honeywell / HCW2GV	<1.000.0000.18.20190409	Mitigation fix Mitigation Mitigation Mitigation Mitigation fix
HCW4G: <1.000.HW00.21.20190812 Honeywell / HCW4G	<1.000.HW00.21.20190812	Mitigation fix Mitigation Mitigation Mitigation Mitigation fix
HDZ302D: <1.000.0041.20180530 Honeywell / HDZ302D	<1.000.0041.20180530	Mitigation fix Mitigation Mitigation Mitigation Mitigation fix
HDZ302DE: <1.000.0041.20180530 Honeywell / HDZ302DE	<1.000.0041.20180530	Mitigation fix Mitigation Mitigation Mitigation Mitigation fix
HDZ302DIN: <1.000.0041.20180530 Honeywell / HDZ302DIN	<1.000.0041.20180530	Mitigation fix Mitigation Mitigation Mitigation Mitigation fix
HDZ302DIN-C1: <1.000.0041.20180530 Honeywell / HDZ302DIN-C1	<1.000.0041.20180530	Mitigation fix Mitigation Mitigation Mitigation Mitigation fix
HDZ302DIN-S1: <1.000.0041.20180530 Honeywell / HDZ302DIN-S1	<1.000.0041.20180530	Mitigation fix Mitigation Mitigation Mitigation Mitigation fix
HDZ302LIK: <1.000.61.1.20180607 Honeywell / HDZ302LIK	<1.000.61.1.20180607	Mitigation fix Mitigation Mitigation Mitigation Mitigation fix
HDZ302LIW: <1.000.61.1.20180607 Honeywell / HDZ302LIW	<1.000.61.1.20180607	Mitigation fix Mitigation Mitigation Mitigation Mitigation fix
HFD6GR1: <1.000.HW00.9.20180510 Honeywell / HFD6GR1	<1.000.HW00.9.20180510	Mitigation fix Mitigation Mitigation Mitigation Mitigation fix
HFD8GR1: <1.000.HW00.9.20180510 Honeywell / HFD8GR1	<1.000.HW00.9.20180510	Mitigation fix Mitigation Mitigation Mitigation Mitigation fix
HM4L8GR1: <1.000.HW02.8.20190813 Honeywell / HM4L8GR1	<1.000.HW02.8.20190813	Mitigation fix Mitigation Mitigation Mitigation Mitigation fix
HMBL8GR1: <1.000.HW02.8.20190813 Honeywell / HMBL8GR1	<1.000.HW02.8.20190813	Mitigation fix Mitigation Mitigation Mitigation Mitigation fix
H4D8PR1: <1.000.HW01.3.20190820 Honeywell / H4D8PR1	<1.000.HW01.3.20190820	Mitigation fix Mitigation Mitigation Mitigation Mitigation fix
HFD5PR1: <1.000.HW01.1.20190822 Honeywell / HFD5PR1	<1.000.HW01.1.20190822	Mitigation fix Mitigation Mitigation Mitigation Mitigation fix
HPW2P1: <1.000.HW01.3.20190820 Honeywell / HPW2P1	<1.000.HW01.3.20190820	Mitigation fix Mitigation Mitigation Mitigation Mitigation fix
HDZP304DI: <1.000.HW10.5.20190812 Honeywell / HDZP304DI	<1.000.HW10.5.20190812	Mitigation fix Mitigation Mitigation Mitigation Mitigation fix
HDZP252DI: <1.000.HW02.3.20181109 Honeywell / HDZP252DI	<1.000.HW02.3.20181109	Mitigation fix Mitigation Mitigation Mitigation Mitigation fix

References

6 references

URL	Category
https://raw.githubusercontent.com/cisagov/CSAF/de…	self
https://www.cisa.gov/news-events/ics-advisories/i…	self
https://www.us-cert.gov/sites/default/files/recom…	external
https://www.us-cert.gov/ics/tips/ICS-TIP-12-146-01B	external
http://web.nvd.nist.gov/view/vuln/detail?vulnId=C…	external
https://www.first.org/cvss/calculator/3.0#CVSS:3.…	external

Acknowledgments

Honeywell

JSON

To clipboard

{
  "document": {
    "acknowledgments": [
      {
        "organization": "Honeywell",
        "summary": "reporting this vulnerability to CISA"
      }
    ],
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Disclosure is not limited",
      "tlp": {
        "label": "WHITE",
        "url": "https://us-cert.cisa.gov/tlp/"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "general",
        "text": "This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov",
        "title": "CISA Disclaimer"
      },
      {
        "category": "legal_disclaimer",
        "text": "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.",
        "title": "Legal Notice"
      },
      {
        "category": "summary",
        "text": "Successful exploitation of this vulnerability could result in unauthenticated access.",
        "title": "Risk evaluation"
      },
      {
        "category": "general",
        "text": "CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.CISA also provides a section for control systems security recommended practices on the ICS webpage onus-cert.gov. Several recommended practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "Additional mitigation guidance and recommended practices are publicly available on the ICS webpage on us-cert.gov in the Technical Information Paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.Organizations observing any suspected malicious activity should follow their established internal procedures and report their findings to CISA for tracking and correlation against other incidents.",
        "title": "Recommended Practices"
      },
      {
        "category": "other",
        "text": "No known public exploits specifically target this vulnerability.",
        "title": "Exploitability"
      }
    ],
    "publisher": {
      "category": "coordinator",
      "contact_details": "Email: CISAservicedesk@cisa.dhs.gov;\n Toll Free: 1-888-282-0870",
      "name": "CISA",
      "namespace": "https://www.cisa.gov/"
    },
    "references": [
      {
        "category": "self",
        "summary": "ICS Advisory ICSA-19-304-03 JSON",
        "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2019/icsa-19-304-03.json"
      },
      {
        "category": "self",
        "summary": "ICS Advisory ICSA-19-304-03 Web Version",
        "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-19-304-03"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.us-cert.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.us-cert.gov/ics/tips/ICS-TIP-12-146-01B"
      }
    ],
    "title": "Honeywell equIP and Performance Series IP Cameras",
    "tracking": {
      "current_release_date": "2019-10-31T00:00:00.000000Z",
      "generator": {
        "engine": {
          "name": "CISA CSAF Generator",
          "version": "1.0.0"
        }
      },
      "id": "ICSA-19-304-03",
      "initial_release_date": "2019-10-31T00:00:00.000000Z",
      "revision_history": [
        {
          "date": "2019-10-31T00:00:00.000000Z",
          "legacy_version": "Initial",
          "number": "1",
          "summary": "ICSA-19-304-03 Honeywell equIP and Performance Series IP Cameras"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": " \u003c1.000.0000.18.20190409",
                "product": {
                  "name": "H2W2GR1:  \u003c1.000.0000.18.20190409",
                  "product_id": "CSAFPID-0001"
                }
              }
            ],
            "category": "product_name",
            "name": "H2W2GR1"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": " \u003c1.000.HW00.21.20190812",
                "product": {
                  "name": "H3W2GR1:  \u003c1.000.HW00.21.20190812",
                  "product_id": "CSAFPID-0002"
                }
              }
            ],
            "category": "product_name",
            "name": "H3W2GR1"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": " \u003c1.000.0000.18.20190409",
                "product": {
                  "name": "H3W2GR1V:  \u003c1.000.0000.18.20190409",
                  "product_id": "CSAFPID-0003"
                }
              }
            ],
            "category": "product_name",
            "name": "H3W2GR1V"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": " \u003c1.000.HW00.21.20190812",
                "product": {
                  "name": "H3W2GR2:  \u003c1.000.HW00.21.20190812",
                  "product_id": "CSAFPID-0004"
                }
              }
            ],
            "category": "product_name",
            "name": "H3W2GR2"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": " \u003c1.000.HW00.21.20190812",
                "product": {
                  "name": "H3W4GR1:  \u003c1.000.HW00.21.20190812",
                  "product_id": "CSAFPID-0005"
                }
              }
            ],
            "category": "product_name",
            "name": "H3W4GR1"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": " \u003c1.000.0000.18.20190409",
                "product": {
                  "name": "H3W4GR1V:  \u003c1.000.0000.18.20190409",
                  "product_id": "CSAFPID-0006"
                }
              }
            ],
            "category": "product_name",
            "name": "H3W4GR1V"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": " \u003c2.420.HW00.9.20180510",
                "product": {
                  "name": "H4D8GR1:  \u003c2.420.HW00.9.20180510",
                  "product_id": "CSAFPID-0007"
                }
              }
            ],
            "category": "product_name",
            "name": "H4D8GR1"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": " \u003c1.000.0000.18.20190423",
                "product": {
                  "name": "H4L2GR1:  \u003c1.000.0000.18.20190423",
                  "product_id": "CSAFPID-0008"
                }
              }
            ],
            "category": "product_name",
            "name": "H4L2GR1"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": " \u003c1.000.0000.18.20190423",
                "product": {
                  "name": "H4L2GR1V:  \u003c1.000.0000.18.20190423",
                  "product_id": "CSAFPID-0009"
                }
              }
            ],
            "category": "product_name",
            "name": "H4L2GR1V"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": " \u003c1.000.HW02.8.20190813",
                "product": {
                  "name": "H4L6GR2:  \u003c1.000.HW02.8.20190813",
                  "product_id": "CSAFPID-00010"
                }
              }
            ],
            "category": "product_name",
            "name": "H4L6GR2"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": " \u003c1.000.HW04.3.20190813",
                "product": {
                  "name": "H4LGGR2:  \u003c1.000.HW04.3.20190813",
                  "product_id": "CSAFPID-00011"
                }
              }
            ],
            "category": "product_name",
            "name": "H4LGGR2"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": " \u003c1.000.HW00.21.20190812",
                "product": {
                  "name": "H4W2GR1:  \u003c1.000.HW00.21.20190812",
                  "product_id": "CSAFPID-00012"
                }
              }
            ],
            "category": "product_name",
            "name": "H4W2GR1"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": " \u003c1.000.0000.18.20190409",
                "product": {
                  "name": "H4W2GR1V:  \u003c1.000.0000.18.20190409",
                  "product_id": "CSAFPID-00013"
                }
              }
            ],
            "category": "product_name",
            "name": "H4W2GR1V"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": " \u003c1.000.HW00.21.20190812",
                "product": {
                  "name": "H4W2GR2:  \u003c1.000.HW00.21.20190812",
                  "product_id": "CSAFPID-00014"
                }
              }
            ],
            "category": "product_name",
            "name": "H4W2GR2"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": " \u003c1.000.HW00.21.20190812",
                "product": {
                  "name": "H4W4GR1:  \u003c1.000.HW00.21.20190812",
                  "product_id": "CSAFPID-00015"
                }
              }
            ],
            "category": "product_name",
            "name": "H4W4GR1"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": " \u003c1.000.0000.18.20190409",
                "product": {
                  "name": "H4W4GR1V:  \u003c1.000.0000.18.20190409",
                  "product_id": "CSAFPID-00016"
                }
              }
            ],
            "category": "product_name",
            "name": "H4W4GR1V"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": " \u003c2.420.HW00.9.20180510",
                "product": {
                  "name": "HBD8GR1:  \u003c2.420.HW00.9.20180510",
                  "product_id": "CSAFPID-00017"
                }
              }
            ],
            "category": "product_name",
            "name": "HBD8GR1"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": " \u003c2.420.HW01.33.20190812",
                "product": {
                  "name": "HBL2GR1:  \u003c2.420.HW01.33.20190812",
                  "product_id": "CSAFPID-00018"
                }
              }
            ],
            "category": "product_name",
            "name": "HBL2GR1"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": " \u003c1.000.0000.18.20190423",
                "product": {
                  "name": "HBL2GR1V:  \u003c1.000.0000.18.20190423",
                  "product_id": "CSAFPID-00019"
                }
              }
            ],
            "category": "product_name",
            "name": "HBL2GR1V"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": " \u003c1.000.HW04.3.20190813",
                "product": {
                  "name": "HBL6GR2:  \u003c1.000.HW04.3.20190813",
                  "product_id": "CSAFPID-00020"
                }
              }
            ],
            "category": "product_name",
            "name": "HBL6GR2"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": " \u003c1.000.HW02.8.20190813",
                "product": {
                  "name": "HBL6GR2:  \u003c1.000.HW02.8.20190813",
                  "product_id": "CSAFPID-00021"
                }
              }
            ],
            "category": "product_name",
            "name": "HBL6GR2"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": " \u003c1.000.HW00.21.20190812",
                "product": {
                  "name": "HBW2GR1:  \u003c1.000.HW00.21.20190812",
                  "product_id": "CSAFPID-00022"
                }
              }
            ],
            "category": "product_name",
            "name": "HBW2GR1"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": " \u003c1.000.0000.18.20190409",
                "product": {
                  "name": "HBW2GR1V:  \u003c1.000.0000.18.20190409",
                  "product_id": "CSAFPID-00023"
                }
              }
            ],
            "category": "product_name",
            "name": "HBW2GR1V"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": " \u003c1.000.HW00.21.20190812",
                "product": {
                  "name": "HBW2GR3:  \u003c1.000.HW00.21.20190812",
                  "product_id": "CSAFPID-00024"
                }
              }
            ],
            "category": "product_name",
            "name": "HBW2GR3"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": " \u003c1.000.0000.18.20190409",
                "product": {
                  "name": "HBW2GR3V:  \u003c1.000.0000.18.20190409",
                  "product_id": "CSAFPID-00025"
                }
              }
            ],
            "category": "product_name",
            "name": "HBW2GR3V"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": " \u003c1.000.HW00.21.20190812",
                "product": {
                  "name": "HBW4GR1:  \u003c1.000.HW00.21.20190812",
                  "product_id": "CSAFPID-00026"
                }
              }
            ],
            "category": "product_name",
            "name": "HBW4GR1"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": " \u003c1.000.0000.18.20190409",
                "product": {
                  "name": "HBW4GR1V:  \u003c1.000.0000.18.20190409",
                  "product_id": "CSAFPID-00027"
                }
              }
            ],
            "category": "product_name",
            "name": "HBW4GR1V"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": " \u003c2.420.HW00.9.20180510",
                "product": {
                  "name": "HCD8G:  \u003c2.420.HW00.9.20180510",
                  "product_id": "CSAFPID-00028"
                }
              }
            ],
            "category": "product_name",
            "name": "HCD8G"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": " \u003c1.000.0000.18.20190423",
                "product": {
                  "name": "HCL2G:  \u003c1.000.0000.18.20190423",
                  "product_id": "CSAFPID-00029"
                }
              }
            ],
            "category": "product_name",
            "name": "HCL2G"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": " \u003c1.000.0000.18.20190423",
                "product": {
                  "name": "HCL2GV:  \u003c1.000.0000.18.20190423",
                  "product_id": "CSAFPID-00030"
                }
              }
            ],
            "category": "product_name",
            "name": "HCL2GV"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": " \u003c1.000.HW00.21.20190812",
                "product": {
                  "name": "HCW2G:  \u003c1.000.HW00.21.20190812",
                  "product_id": "CSAFPID-00031"
                }
              }
            ],
            "category": "product_name",
            "name": "HCW2G"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": " \u003c1.000.0000.18.20190409",
                "product": {
                  "name": "HCW2GV:  \u003c1.000.0000.18.20190409",
                  "product_id": "CSAFPID-00032"
                }
              }
            ],
            "category": "product_name",
            "name": "HCW2GV"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": " \u003c1.000.HW00.21.20190812",
                "product": {
                  "name": "HCW4G:  \u003c1.000.HW00.21.20190812",
                  "product_id": "CSAFPID-00033"
                }
              }
            ],
            "category": "product_name",
            "name": "HCW4G"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": " \u003c1.000.0041.20180530",
                "product": {
                  "name": "HDZ302D:  \u003c1.000.0041.20180530",
                  "product_id": "CSAFPID-00034"
                }
              }
            ],
            "category": "product_name",
            "name": "HDZ302D"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": " \u003c1.000.0041.20180530",
                "product": {
                  "name": "HDZ302DE:  \u003c1.000.0041.20180530",
                  "product_id": "CSAFPID-00035"
                }
              }
            ],
            "category": "product_name",
            "name": "HDZ302DE"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": " \u003c1.000.0041.20180530",
                "product": {
                  "name": "HDZ302DIN:  \u003c1.000.0041.20180530",
                  "product_id": "CSAFPID-00036"
                }
              }
            ],
            "category": "product_name",
            "name": "HDZ302DIN"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": " \u003c1.000.0041.20180530",
                "product": {
                  "name": "HDZ302DIN-C1:  \u003c1.000.0041.20180530",
                  "product_id": "CSAFPID-00037"
                }
              }
            ],
            "category": "product_name",
            "name": "HDZ302DIN-C1"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": " \u003c1.000.0041.20180530",
                "product": {
                  "name": "HDZ302DIN-S1:  \u003c1.000.0041.20180530",
                  "product_id": "CSAFPID-00038"
                }
              }
            ],
            "category": "product_name",
            "name": "HDZ302DIN-S1"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": " \u003c1.000.61.1.20180607",
                "product": {
                  "name": "HDZ302LIK:  \u003c1.000.61.1.20180607",
                  "product_id": "CSAFPID-00039"
                }
              }
            ],
            "category": "product_name",
            "name": "HDZ302LIK"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": " \u003c1.000.61.1.20180607",
                "product": {
                  "name": "HDZ302LIW:  \u003c1.000.61.1.20180607",
                  "product_id": "CSAFPID-00040"
                }
              }
            ],
            "category": "product_name",
            "name": "HDZ302LIW"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": " \u003c1.000.HW00.9.20180510",
                "product": {
                  "name": "HFD6GR1:  \u003c1.000.HW00.9.20180510",
                  "product_id": "CSAFPID-00041"
                }
              }
            ],
            "category": "product_name",
            "name": "HFD6GR1"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": " \u003c1.000.HW00.9.20180510",
                "product": {
                  "name": "HFD8GR1:  \u003c1.000.HW00.9.20180510",
                  "product_id": "CSAFPID-00042"
                }
              }
            ],
            "category": "product_name",
            "name": "HFD8GR1"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": " \u003c1.000.HW02.8.20190813",
                "product": {
                  "name": "HM4L8GR1:  \u003c1.000.HW02.8.20190813",
                  "product_id": "CSAFPID-00043"
                }
              }
            ],
            "category": "product_name",
            "name": "HM4L8GR1"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": " \u003c1.000.HW02.8.20190813",
                "product": {
                  "name": "HMBL8GR1:  \u003c1.000.HW02.8.20190813",
                  "product_id": "CSAFPID-00044"
                }
              }
            ],
            "category": "product_name",
            "name": "HMBL8GR1"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": " \u003c1.000.HW01.3.20190820",
                "product": {
                  "name": "H4D8PR1:  \u003c1.000.HW01.3.20190820",
                  "product_id": "CSAFPID-00045"
                }
              }
            ],
            "category": "product_name",
            "name": "H4D8PR1"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": " \u003c1.000.HW01.1.20190822",
                "product": {
                  "name": "HFD5PR1:  \u003c1.000.HW01.1.20190822",
                  "product_id": "CSAFPID-00046"
                }
              }
            ],
            "category": "product_name",
            "name": "HFD5PR1"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": " \u003c1.000.HW01.3.20190820",
                "product": {
                  "name": "HPW2P1:  \u003c1.000.HW01.3.20190820",
                  "product_id": "CSAFPID-00047"
                }
              }
            ],
            "category": "product_name",
            "name": "HPW2P1"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": " \u003c1.000.HW10.5.20190812",
                "product": {
                  "name": "HDZP304DI:  \u003c1.000.HW10.5.20190812",
                  "product_id": "CSAFPID-00048"
                }
              }
            ],
            "category": "product_name",
            "name": "HDZP304DI"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": " \u003c1.000.HW02.3.20181109",
                "product": {
                  "name": "HDZP252DI:  \u003c1.000.HW02.3.20181109",
                  "product_id": "CSAFPID-00049"
                }
              }
            ],
            "category": "product_name",
            "name": "HDZP252DI"
          }
        ],
        "category": "vendor",
        "name": "Honeywell"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-18230",
      "cwe": {
        "id": "CWE-306",
        "name": "Missing Authentication for Critical Function"
      },
      "notes": [
        {
          "category": "summary",
          "text": "A vulnerability exists where the affected product allows unauthenticated access to audio streaming over HTTP.CVE-2019-18230 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001",
          "CSAFPID-0002",
          "CSAFPID-0003",
          "CSAFPID-0004",
          "CSAFPID-0005",
          "CSAFPID-0006",
          "CSAFPID-0007",
          "CSAFPID-0008",
          "CSAFPID-0009",
          "CSAFPID-00010",
          "CSAFPID-00011",
          "CSAFPID-00012",
          "CSAFPID-00013",
          "CSAFPID-00014",
          "CSAFPID-00015",
          "CSAFPID-00016",
          "CSAFPID-00017",
          "CSAFPID-00018",
          "CSAFPID-00019",
          "CSAFPID-00020",
          "CSAFPID-00021",
          "CSAFPID-00022",
          "CSAFPID-00023",
          "CSAFPID-00024",
          "CSAFPID-00025",
          "CSAFPID-00026",
          "CSAFPID-00027",
          "CSAFPID-00028",
          "CSAFPID-00029",
          "CSAFPID-00030",
          "CSAFPID-00031",
          "CSAFPID-00032",
          "CSAFPID-00033",
          "CSAFPID-00034",
          "CSAFPID-00035",
          "CSAFPID-00036",
          "CSAFPID-00037",
          "CSAFPID-00038",
          "CSAFPID-00039",
          "CSAFPID-00040",
          "CSAFPID-00041",
          "CSAFPID-00042",
          "CSAFPID-00043",
          "CSAFPID-00044",
          "CSAFPID-00045",
          "CSAFPID-00046",
          "CSAFPID-00047",
          "CSAFPID-00048",
          "CSAFPID-00049"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "web.nvd.nist.gov",
          "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-18230"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Honeywell has released firmware update packages for all affected products. ",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013",
            "CSAFPID-00014",
            "CSAFPID-00015",
            "CSAFPID-00016",
            "CSAFPID-00017",
            "CSAFPID-00018",
            "CSAFPID-00019",
            "CSAFPID-00020",
            "CSAFPID-00021",
            "CSAFPID-00022",
            "CSAFPID-00023",
            "CSAFPID-00024",
            "CSAFPID-00025",
            "CSAFPID-00026",
            "CSAFPID-00027",
            "CSAFPID-00028",
            "CSAFPID-00029",
            "CSAFPID-00030",
            "CSAFPID-00031",
            "CSAFPID-00032",
            "CSAFPID-00033",
            "CSAFPID-00034",
            "CSAFPID-00035",
            "CSAFPID-00036",
            "CSAFPID-00037",
            "CSAFPID-00038",
            "CSAFPID-00039",
            "CSAFPID-00040",
            "CSAFPID-00041",
            "CSAFPID-00042",
            "CSAFPID-00043",
            "CSAFPID-00044",
            "CSAFPID-00045",
            "CSAFPID-00046",
            "CSAFPID-00047",
            "CSAFPID-00048",
            "CSAFPID-00049"
          ],
          "url": "https://mywebtech.honeywell.com/Home"
        },
        {
          "category": "mitigation",
          "details": "Update firmware of vulnerable devices per this security notification",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013",
            "CSAFPID-00014",
            "CSAFPID-00015",
            "CSAFPID-00016",
            "CSAFPID-00017",
            "CSAFPID-00018",
            "CSAFPID-00019",
            "CSAFPID-00020",
            "CSAFPID-00021",
            "CSAFPID-00022",
            "CSAFPID-00023",
            "CSAFPID-00024",
            "CSAFPID-00025",
            "CSAFPID-00026",
            "CSAFPID-00027",
            "CSAFPID-00028",
            "CSAFPID-00029",
            "CSAFPID-00030",
            "CSAFPID-00031",
            "CSAFPID-00032",
            "CSAFPID-00033",
            "CSAFPID-00034",
            "CSAFPID-00035",
            "CSAFPID-00036",
            "CSAFPID-00037",
            "CSAFPID-00038",
            "CSAFPID-00039",
            "CSAFPID-00040",
            "CSAFPID-00041",
            "CSAFPID-00042",
            "CSAFPID-00043",
            "CSAFPID-00044",
            "CSAFPID-00045",
            "CSAFPID-00046",
            "CSAFPID-00047",
            "CSAFPID-00048",
            "CSAFPID-00049"
          ]
        },
        {
          "category": "mitigation",
          "details": "Isolate their system from the Internet or create additional layers of defense to their system from the Internet by placing the affected hardware behind a firewall or into a DMZ",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013",
            "CSAFPID-00014",
            "CSAFPID-00015",
            "CSAFPID-00016",
            "CSAFPID-00017",
            "CSAFPID-00018",
            "CSAFPID-00019",
            "CSAFPID-00020",
            "CSAFPID-00021",
            "CSAFPID-00022",
            "CSAFPID-00023",
            "CSAFPID-00024",
            "CSAFPID-00025",
            "CSAFPID-00026",
            "CSAFPID-00027",
            "CSAFPID-00028",
            "CSAFPID-00029",
            "CSAFPID-00030",
            "CSAFPID-00031",
            "CSAFPID-00032",
            "CSAFPID-00033",
            "CSAFPID-00034",
            "CSAFPID-00035",
            "CSAFPID-00036",
            "CSAFPID-00037",
            "CSAFPID-00038",
            "CSAFPID-00039",
            "CSAFPID-00040",
            "CSAFPID-00041",
            "CSAFPID-00042",
            "CSAFPID-00043",
            "CSAFPID-00044",
            "CSAFPID-00045",
            "CSAFPID-00046",
            "CSAFPID-00047",
            "CSAFPID-00048",
            "CSAFPID-00049"
          ]
        },
        {
          "category": "mitigation",
          "details": "If remote connections to the network are required, consider using a VPN or other means to ensure secure remote connections into the network where the device is located.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013",
            "CSAFPID-00014",
            "CSAFPID-00015",
            "CSAFPID-00016",
            "CSAFPID-00017",
            "CSAFPID-00018",
            "CSAFPID-00019",
            "CSAFPID-00020",
            "CSAFPID-00021",
            "CSAFPID-00022",
            "CSAFPID-00023",
            "CSAFPID-00024",
            "CSAFPID-00025",
            "CSAFPID-00026",
            "CSAFPID-00027",
            "CSAFPID-00028",
            "CSAFPID-00029",
            "CSAFPID-00030",
            "CSAFPID-00031",
            "CSAFPID-00032",
            "CSAFPID-00033",
            "CSAFPID-00034",
            "CSAFPID-00035",
            "CSAFPID-00036",
            "CSAFPID-00037",
            "CSAFPID-00038",
            "CSAFPID-00039",
            "CSAFPID-00040",
            "CSAFPID-00041",
            "CSAFPID-00042",
            "CSAFPID-00043",
            "CSAFPID-00044",
            "CSAFPID-00045",
            "CSAFPID-00046",
            "CSAFPID-00047",
            "CSAFPID-00048",
            "CSAFPID-00049"
          ]
        },
        {
          "category": "mitigation",
          "details": "More information on this issue can be found in Honeywell Security Notification SN 2019-09-04 01",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013",
            "CSAFPID-00014",
            "CSAFPID-00015",
            "CSAFPID-00016",
            "CSAFPID-00017",
            "CSAFPID-00018",
            "CSAFPID-00019",
            "CSAFPID-00020",
            "CSAFPID-00021",
            "CSAFPID-00022",
            "CSAFPID-00023",
            "CSAFPID-00024",
            "CSAFPID-00025",
            "CSAFPID-00026",
            "CSAFPID-00027",
            "CSAFPID-00028",
            "CSAFPID-00029",
            "CSAFPID-00030",
            "CSAFPID-00031",
            "CSAFPID-00032",
            "CSAFPID-00033",
            "CSAFPID-00034",
            "CSAFPID-00035",
            "CSAFPID-00036",
            "CSAFPID-00037",
            "CSAFPID-00038",
            "CSAFPID-00039",
            "CSAFPID-00040",
            "CSAFPID-00041",
            "CSAFPID-00042",
            "CSAFPID-00043",
            "CSAFPID-00044",
            "CSAFPID-00045",
            "CSAFPID-00046",
            "CSAFPID-00047",
            "CSAFPID-00048",
            "CSAFPID-00049"
          ],
          "url": "https://www.security.honeywell.com/-/media/Security/Resources/PDF/Product-Warranty/Security_Notification_SN_2019-09-04-01_V4-pdf.pdf"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013",
            "CSAFPID-00014",
            "CSAFPID-00015",
            "CSAFPID-00016",
            "CSAFPID-00017",
            "CSAFPID-00018",
            "CSAFPID-00019",
            "CSAFPID-00020",
            "CSAFPID-00021",
            "CSAFPID-00022",
            "CSAFPID-00023",
            "CSAFPID-00024",
            "CSAFPID-00025",
            "CSAFPID-00026",
            "CSAFPID-00027",
            "CSAFPID-00028",
            "CSAFPID-00029",
            "CSAFPID-00030",
            "CSAFPID-00031",
            "CSAFPID-00032",
            "CSAFPID-00033",
            "CSAFPID-00034",
            "CSAFPID-00035",
            "CSAFPID-00036",
            "CSAFPID-00037",
            "CSAFPID-00038",
            "CSAFPID-00039",
            "CSAFPID-00040",
            "CSAFPID-00041",
            "CSAFPID-00042",
            "CSAFPID-00043",
            "CSAFPID-00044",
            "CSAFPID-00045",
            "CSAFPID-00046",
            "CSAFPID-00047",
            "CSAFPID-00048",
            "CSAFPID-00049"
          ]
        }
      ]
    }
  ]
}

CVE-2019-18230 (GCVE-0-2019-18230)

Vulnerability from cvelistv5 – Published: 2019-10-31 21:15 – Updated: 2024-08-05 01:47

Summary

Honeywell equIP and Performance series IP cameras, multiple versions, A vulnerability exists where the affected product allows unauthenticated access to audio streaming over HTTP.

Severity

No CVSS data available.

CWE

CWE-306

Assigner

icscert

References

1 reference

URL	Tags
https://www.us-cert.gov/ics/advisories/icsa-19-304-03	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
n/a	Honeywell equIP & Performance series IP cameras	Affected: equIP Camera,Vulnability fixed from version,H2W2GR1 1.000.0000.18.20190409,H3W2GR1 1.000.HW00.21.20190812,H3W2GR1V 1.000.0000.18.20190409,H3W2GR2 1.000.HW00.21.20190812,H3W4GR1 1.000.HW00.21.20190812,H3W4GR1V 1.000.0000.18.20190409,H4D8GR1 2.420.HW00.9.20180510,H4L2GR1 1.000.0000.18.20190423,H4L2GR1V 1.000.0000.18.20190423,H4L6GR2 1.000.HW02.8.20190813,H4LGGR2 .000.HW04.3.20190813,H4W2GR1 1.000.HW00.21.20190812,H4W2GR1V 1.000.0000.18.20190409,H4W2GR2 1.000.HW00.21.20190812,H4W4GR1 1.000.HW00.21.20190812,H4W4GR1V 1.000.0000.18.20190409,HBD8GR1 2.420.HW00.9.20180510,HBL2GR1 2.420.HW01.33.20190812,HBL2GR1V 1.000.0000.18.20190423,HBL6GR2 1.000.HW04.3.20190813,HBL6GR2 1.000.HW02.8.20190813,HBW2GR1 1.000.HW00.21.20190812, HBW2GR1V 1.000.0000.18.20190409,HBW2GR3 1.000.HW00.21.20190812,HBW2GR3V 1.000.0000.18.20190409,HBW4GR1 1.000.HW00.21.20190812, HBW4GR1V 1.000.0000.18.20190409,HCD8G 2.420.HW00.9.20180510,HCL2G 1.000.0000.18.20190423,HCL2GV 1.000.0000.18.20190423,HCW2G 1.000.HW00.21.20190812,HCW2GV ...[truncated*]

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T01:47:14.024Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.us-cert.gov/ics/advisories/icsa-19-304-03"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Honeywell equIP \u0026 Performance series IP cameras",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "equIP Camera,Vulnability fixed from version,H2W2GR1 1.000.0000.18.20190409,H3W2GR1 1.000.HW00.21.20190812,H3W2GR1V 1.000.0000.18.20190409,H3W2GR2 1.000.HW00.21.20190812,H3W4GR1 1.000.HW00.21.20190812,H3W4GR1V 1.000.0000.18.20190409,H4D8GR1 2.420.HW00.9.20180510,H4L2GR1 1.000.0000.18.20190423,H4L2GR1V 1.000.0000.18.20190423,H4L6GR2 1.000.HW02.8.20190813,H4LGGR2 .000.HW04.3.20190813,H4W2GR1 1.000.HW00.21.20190812,H4W2GR1V 1.000.0000.18.20190409,H4W2GR2 1.000.HW00.21.20190812,H4W4GR1 1.000.HW00.21.20190812,H4W4GR1V 1.000.0000.18.20190409,HBD8GR1 2.420.HW00.9.20180510,HBL2GR1 2.420.HW01.33.20190812,HBL2GR1V 1.000.0000.18.20190423,HBL6GR2 1.000.HW04.3.20190813,HBL6GR2 1.000.HW02.8.20190813,HBW2GR1 1.000.HW00.21.20190812, HBW2GR1V 1.000.0000.18.20190409,HBW2GR3 1.000.HW00.21.20190812,HBW2GR3V 1.000.0000.18.20190409,HBW4GR1 1.000.HW00.21.20190812, HBW4GR1V 1.000.0000.18.20190409,HCD8G 2.420.HW00.9.20180510,HCL2G 1.000.0000.18.20190423,HCL2GV 1.000.0000.18.20190423,HCW2G 1.000.HW00.21.20190812,HCW2GV  ...[truncated*]"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Honeywell equIP and Performance series IP cameras, multiple versions, A vulnerability exists where the affected product allows unauthenticated access to audio streaming over HTTP."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-306",
              "description": "CWE-306",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-10-31T21:15:32.000Z",
        "orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
        "shortName": "icscert"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.us-cert.gov/ics/advisories/icsa-19-304-03"
        }
      ],
      "x_ConverterErrors": {
        "version_name": {
          "error": "version_name too long. Use array of versions to record more than one version.",
          "message": "Truncated!"
        }
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "ics-cert@hq.dhs.gov",
          "ID": "CVE-2019-18230",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Honeywell equIP \u0026 Performance series IP cameras",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "equIP Camera,Vulnability fixed from version,H2W2GR1 1.000.0000.18.20190409,H3W2GR1 1.000.HW00.21.20190812,H3W2GR1V 1.000.0000.18.20190409,H3W2GR2 1.000.HW00.21.20190812,H3W4GR1 1.000.HW00.21.20190812,H3W4GR1V 1.000.0000.18.20190409,H4D8GR1 2.420.HW00.9.20180510,H4L2GR1 1.000.0000.18.20190423,H4L2GR1V 1.000.0000.18.20190423,H4L6GR2 1.000.HW02.8.20190813,H4LGGR2 .000.HW04.3.20190813,H4W2GR1 1.000.HW00.21.20190812,H4W2GR1V 1.000.0000.18.20190409,H4W2GR2 1.000.HW00.21.20190812,H4W4GR1 1.000.HW00.21.20190812,H4W4GR1V 1.000.0000.18.20190409,HBD8GR1 2.420.HW00.9.20180510,HBL2GR1 2.420.HW01.33.20190812,HBL2GR1V 1.000.0000.18.20190423,HBL6GR2 1.000.HW04.3.20190813,HBL6GR2 1.000.HW02.8.20190813,HBW2GR1 1.000.HW00.21.20190812, HBW2GR1V 1.000.0000.18.20190409,HBW2GR3 1.000.HW00.21.20190812,HBW2GR3V 1.000.0000.18.20190409,HBW4GR1 1.000.HW00.21.20190812, HBW4GR1V 1.000.0000.18.20190409,HCD8G 2.420.HW00.9.20180510,HCL2G 1.000.0000.18.20190423,HCL2GV 1.000.0000.18.20190423,HCW2G 1.000.HW00.21.20190812,HCW2GV 1.000.0000.18.20190409,HCW4G 1.000.HW00.21.20190812,HDZ302D 1.000.0041.20180530,HDZ302DE 1.000.0041.20180530,HDZ302DIN 1.000.0041.20180530,HDZ302DIN-C1 1.000.0041.20180530,HDZ302DIN-S1 1.000.0041.20180530,HDZ302LIK 1.000.61.1.20180607,HDZ302LIW 1.000.61.1.20180607,HFD6GR1 1.000.HW00.9.20180510,HFD8GR1 1.000.HW00.9.20180510,HM4L8GR1 1.000.HW02.8.20190813,HMBL8GR1 1.000.HW02.8.20190813,Performance Series Vulnability fixed from version,H4D8PR1 1.000.HW01.3.20190820,HFD5PR1 1.000.HW01.1.20190822,HPW2P1 1.000.HW01.3.20190820,HDZP304DI 1.000.HW10.5.20190812,HDZP252DI 1.000.HW02.3.20181109"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Honeywell equIP and Performance series IP cameras, multiple versions, A vulnerability exists where the affected product allows unauthenticated access to audio streaming over HTTP."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-306"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.us-cert.gov/ics/advisories/icsa-19-304-03",
              "refsource": "MISC",
              "url": "https://www.us-cert.gov/ics/advisories/icsa-19-304-03"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
    "assignerShortName": "icscert",
    "cveId": "CVE-2019-18230",
    "datePublished": "2019-10-31T21:15:32.000Z",
    "dateReserved": "2019-10-22T00:00:00.000Z",
    "dateUpdated": "2024-08-05T01:47:14.024Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

ICSA-19-304-03

CVE-2019-18230 (GCVE-0-2019-18230)

Tags

Sightings

Nomenclature