Description
In Honeywell Performance IP Cameras and Performance NVRs, the integrated web server of the affected devices could allow remote attackers to obtain web configuration data in JSON format for IP cameras and NVRs (Network Video Recorders), which can be accessed without authentication over the network. Affected performance IP Cameras: HBD3PR2,H4D3PRV3,HED3PR3,H4D3PRV2,HBD3PR1,H4W8PR2,HBW8PR2,H2W2PC1M,H2W4PER3,H2W2PER3,HEW2PER3,HEW4PER3B,HBW2PER1,HEW4PER2,HEW4PER2B,HEW2PER2,H4W2PER2,HBW2PER2,H4W2PER3, and HPW2P1. Affected Performance Series NVRs: HEN08104,HEN08144,HEN081124,HEN16104,HEN16144,HEN16184,HEN16204,HEN162244,HEN16284,HEN16304,HEN16384,HEN32104,HEN321124,HEN32204,HEN32284,HEN322164,HEN32304, HEN32384,HEN323164,HEN64204,HEN64304,HEN643164,HEN643324,HEN643484,HEN04103,HEN04113,HEN04123,HEN08103,HEN08113,HEN08123,HEN08143,HEN16103,HEN16123,HEN16143,HEN16163,HEN04103L,HEN08103L,HEN16103L,HEN32103L.
Published: 2019-09-26
Score: 5.3 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2019-4978 In Honeywell Performance IP Cameras and Performance NVRs, the integrated web server of the affected devices could allow remote attackers to obtain web configuration data in JSON format for IP cameras and NVRs (Network Video Recorders), which can be accessed without authentication over the network. Affected performance IP Cameras: HBD3PR2,H4D3PRV3,HED3PR3,H4D3PRV2,HBD3PR1,H4W8PR2,HBW8PR2,H2W2PC1M,H2W4PER3,H2W2PER3,HEW2PER3,HEW4PER3B,HBW2PER1,HEW4PER2,HEW4PER2B,HEW2PER2,H4W2PER2,HBW2PER2,H4W2PER3, and HPW2P1. Affected Performance Series NVRs: HEN08104,HEN08144,HEN081124,HEN16104,HEN16144,HEN16184,HEN16204,HEN162244,HEN16284,HEN16304,HEN16384,HEN32104,HEN321124,HEN32204,HEN32284,HEN322164,HEN32304, HEN32384,HEN323164,HEN64204,HEN64304,HEN643164,HEN643324,HEN643484,HEN04103,HEN04113,HEN04123,HEN08103,HEN08113,HEN08123,HEN08143,HEN16103,HEN16123,HEN16143,HEN16163,HEN04103L,HEN08103L,HEN16103L,HEN32103L.
History

No history.

Subscriptions

Honeywell H2w2pc1m H2w2pc1m Firmware H2w2per3 H2w2per3 Firmware H2w4per3 H2w4per3 Firmware H4d3prv2 H4d3prv2 Firmware H4d3prv3 H4d3prv3 Firmware H4w2per2 H4w2per2 Firmware H4w2per3 H4w2per3 Firmware H4w8pr2 H4w8pr2 Firmware Hbd3pr1 Hbd3pr1 Firmware Hbd3pr2 Hbd3pr2 Firmware Hbw2per1 Hbw2per1 Firmware Hbw2per2 Hbw2per2 Firmware Hbw8pr2 Hbw8pr2 Firmware Hed3pr3 Hed3pr3 Firmware Hen04103 Hen04103 Firmware Hen04103l Hen04103l Firmware Hen04113 Hen04113 Firmware Hen04123 Hen04123 Firmware Hen08103 Hen08103 Firmware Hen08103l Hen08103l Firmware Hen08104 Hen08104 Firmware Hen081124 Hen081124 Firmware Hen08113 Hen08113 Firmware Hen08123 Hen08123 Firmware Hen08143 Hen08143 Firmware Hen08144 Hen08144 Firmware Hen16103 Hen16103 Firmware Hen16103l Hen16103l Firmware Hen16104 Hen16104 Firmware Hen16123 Hen16123 Firmware Hen16143 Hen16143 Firmware Hen16144 Hen16144 Firmware Hen16163 Hen16163 Firmware Hen16184 Hen16184 Firmware Hen16204 Hen16204 Firmware Hen162244 Hen162244 Firmware Hen16284 Hen16284 Firmware Hen16304 Hen16304 Firmware Hen16384 Hen16384 Firmware Hen32103l Hen32103l Firmware Hen32104 Hen32104 Firmware Hen321124 Hen321124 Firmware Hen32204 Hen32204 Firmware Hen322164 Hen322164 Firmware Hen32284 Hen32284 Firmware Hen32304 Hen32304 Firmware Hen323164 Hen323164 Firmware Hen32384 Hen32384 Firmware Hen64204 Hen64204 Firmware Hen64304 Hen64304 Firmware Hen643164 Hen643164 Firmware Hen643324 Hen643324 Firmware Hen643484 Hen643484 Firmware Hew2per2 Hew2per2 Firmware Hew2per3 Hew2per3 Firmware Hew4per2 Hew4per2 Firmware Hew4per2b Hew4per2b Firmware Hew4per3b Hew4per3b Firmware Hpw2p1 Hpw2p1 Firmware
cve-icon MITRE

Status: PUBLISHED

Assigner: icscert

Published:

Updated: 2024-08-04T23:57:39.391Z

Reserved: 2019-07-11T00:00:00.000Z

Link: CVE-2019-13523

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2019-09-26T16:15:11.067

Modified: 2024-11-21T04:25:04.220

Link: CVE-2019-13523

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses