MEDIUM🇬🇧 English

CVE-2019-13523

CVSS 5.3v3.1pub. 2019-09-26upd. 2024-11-21

In Honeywell Performance IP Cameras and Performance NVRs, the integrated web server of the affected devices could allow remote attackers to obtain web configuration data in JSON format for IP cameras and NVRs (Network Video Recorders), which can be accessed without authentication over the network. Affected performance IP Cameras: HBD3PR2,H4D3PRV3,HED3PR3,H4D3PRV2,HBD3PR1,H4W8PR2,HBW8PR2,H2W2PC1M,H2W4PER3,H2W2PER3,HEW2PER3,HEW4PER3B,HBW2PER1,HEW4PER2,HEW4PER2B,HEW2PER2,H4W2PER2,HBW2PER2,H4W2PER3, and HPW2P1. Affected Performance Series NVRs: HEN08104,HEN08144,HEN081124,HEN16104,HEN16144,HEN16184,HEN16204,HEN162244,HEN16284,HEN16304,HEN16384,HEN32104,HEN321124,HEN32204,HEN32284,HEN322164,HEN32304, HEN32384,HEN323164,HEN64204,HEN64304,HEN643164,HEN643324,HEN643484,HEN04103,HEN04113,HEN04123,HEN08103,HEN08113,HEN08123,HEN08143,HEN16103,HEN16123,HEN16143,HEN16163,HEN04103L,HEN08103L,HEN16103L,HEN32103L.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

  • Honeywell H2w2pc1m

    HW
    Honeywell
    wszystkie wersje

  • Honeywell H2w2pc1m Firmware

    OS
    Honeywell
    wszystkie wersje

  • Honeywell H2w2per3

    HW
    Honeywell
    wszystkie wersje

  • Honeywell H2w2per3 Firmware

    OS
    Honeywell
    wszystkie wersje

  • Honeywell H2w4per3

    HW
    Honeywell
    wszystkie wersje

  • Honeywell H2w4per3 Firmware

    OS
    Honeywell
    wszystkie wersje

  • Honeywell H4d3prv2

    HW
    Honeywell
    wszystkie wersje

  • Honeywell H4d3prv2 Firmware

    OS
    Honeywell
    wszystkie wersje

  • Honeywell H4d3prv3

    HW
    Honeywell
    wszystkie wersje

  • Honeywell H4d3prv3 Firmware

    OS
    Honeywell
    wszystkie wersje

  • Honeywell H4w2per2

    HW
    Honeywell
    wszystkie wersje

  • Honeywell H4w2per2 Firmware

    OS
    Honeywell
    wszystkie wersje

  • Honeywell H4w2per3

    HW
    Honeywell
    wszystkie wersje

  • Honeywell H4w2per3 Firmware

    OS
    Honeywell
    wszystkie wersje

  • Honeywell H4w8pr2

    HW
    Honeywell
    wszystkie wersje

  • Honeywell H4w8pr2 Firmware

    OS
    Honeywell
    wszystkie wersje

  • Honeywell Hbd3pr1

    HW
    Honeywell
    wszystkie wersje

  • Honeywell Hbd3pr1 Firmware

    OS
    Honeywell
    wszystkie wersje

  • Honeywell Hbd3pr2

    HW
    Honeywell
    wszystkie wersje

  • Honeywell Hbd3pr2 Firmware

    OS
    Honeywell
    wszystkie wersje

  • Honeywell Hbw2per1

    HW
    Honeywell
    wszystkie wersje

  • Honeywell Hbw2per1 Firmware

    OS
    Honeywell
    wszystkie wersje

  • Honeywell Hbw2per2

    HW
    Honeywell
    wszystkie wersje

  • Honeywell Hbw2per2 Firmware

    OS
    Honeywell
    wszystkie wersje

  • Honeywell Hbw8pr2

    HW
    Honeywell
    wszystkie wersje

  • Honeywell Hbw8pr2 Firmware

    OS
    Honeywell
    wszystkie wersje

  • Honeywell Hed3pr3

    HW
    Honeywell
    wszystkie wersje

  • Honeywell Hed3pr3 Firmware

    OS
    Honeywell
    wszystkie wersje

  • Honeywell Hen04103

    HW
    Honeywell
    wszystkie wersje

  • Honeywell Hen04103 Firmware

    OS
    Honeywell
    wszystkie wersje
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje

Powiązane podatności

CVE-2021-39363CRITICAL9.8ten sam produkt

Honeywell HDZP252DI 1.00.HW02.4 and HBW2PER1 1.000.HW01.3 devices allow a video replay attack after ARP cache ...

CVE-2019-18226CRITICAL9.8ten sam produkt

Honeywell equIP series and Performance series IP cameras and recorders, A vulnerability exists in the affected...

CVE-2021-39364HIGH7.5ten sam produkt

Honeywell HDZP252DI 1.00.HW02.4 and HBW2PER1 1.000.HW01.3 devices allow command spoofing (for camera control) ...

CVE-2019-18228HIGH7.5ten sam produkt

Honeywell equIP series IP cameras Multiple equIP Series Cameras, A vulnerability exists in the affected produc...

CVE-2019-18230HIGH7.5ten sam produkt

Honeywell equIP and Performance series IP cameras, multiple versions, A vulnerability exists where the affecte...