Vulnerabilities > Honeywell > H2W2Gr1 Firmware

DATE CVE VULNERABILITY TITLE RISK
2019-10-31 CVE-2019-18230 Missing Authentication for Critical Function vulnerability in Honeywell products
Honeywell equIP and Performance series IP cameras, multiple versions, A vulnerability exists where the affected product allows unauthenticated access to audio streaming over HTTP.
network
low complexity
honeywell CWE-306
7.5
2019-10-31 CVE-2019-18228 Improper Input Validation vulnerability in Honeywell products
Honeywell equIP series IP cameras Multiple equIP Series Cameras, A vulnerability exists in the affected products where a specially crafted HTTP packet request could result in a denial of service.
network
low complexity
honeywell CWE-20
7.5
2019-10-31 CVE-2019-18226 Authentication Bypass by Capture-replay vulnerability in Honeywell products
Honeywell equIP series and Performance series IP cameras and recorders, A vulnerability exists in the affected products where IP cameras and recorders have a potential replay attack vulnerability as a weak authentication method is retained for compatibility with legacy products.
network
low complexity
honeywell CWE-294
critical
9.8