CVE-2019-18226
Honeywell equIP series and Performance series IP cameras and recorders, A vulnerability exists in...
Honeywell equIP series and Performance series IP cameras and recorders, A vulnerability exists in the affected products where IP cameras and recorders have a potential replay attack vulnerability as a weak authentication method is retained for compatibility with legacy products.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Honeywell equIP series and Performance series IP cameras and recorders, A vulnerability exists in the affected products where IP cameras and recorders have a potential replay attack vulnerability as a weak authentication method is retained for compatibility with legacy products.
- Record
CVE-2019-18226- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-294
- Updated
- 2026-11-02
CVE List No score
Honeywell equIP series and Performance series IP cameras and recorders, A vulnerability exists in the affected products where IP cameras and recorders have a potential replay attack vulnerability as a weak authentication method is retained for compatibility with legacy products.
- Record
CVE-2019-18226- Weakness
- CWE-294
- Updated
- 2026-11-02
EUVDEUVD-2019-8026 No score
Honeywell equIP series and Performance series IP cameras and recorders, A vulnerability exists in the affected products where IP cameras and recorders have a potential replay attack vulnerability as a weak authentication method is retained for compatibility with legacy products.
- Record
EUVD-2019-8026- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-j9vx-r62j-mx34 No score
Honeywell equIP series and Performance series IP cameras and recorders, A vulnerability exists in...
Honeywell equIP series and Performance series IP cameras and recorders, A vulnerability exists in the affected products where IP cameras and recorders have a potential replay attack vulnerability as a weak authentication method is retained for compatibility with legacy products.
- Record
GHSA-j9vx-r62j-mx34- Updated
- 2026-11-02
Affected products
- honeywell h2w2gr1 firmware
- honeywell h2w2pc1m firmware
- honeywell h2w2per3 firmware
- honeywell h2w4per3 firmware
- honeywell h3w2gr1 firmware
- honeywell h3w2gr1v firmware
- honeywell h3w2gr2 firmware
- honeywell h3w4gr1 firmware
- honeywell h3w4gr1v firmware
- honeywell h4d8gr1 firmware
- honeywell h4l2gr1 firmware
- honeywell h4l2gr1v firmware
Show 52 moreShow less
- honeywell h4l6gr2 firmware
- honeywell h4w2gr1 firmware
- honeywell h4w2gr1v firmware
- honeywell h4w2gr2 firmware
- honeywell h4w2per2 firmware
- honeywell h4w2per3 firmware
- honeywell h4w4gr1 firmware
- honeywell h4w4gr1v firmware
- honeywell h4w4per2 firmware
- honeywell h4w4per3 firmware
- honeywell h4w8pr2 firmware
- honeywell hbd2per1 firmware
- honeywell hbd8gr1 firmware
- honeywell hbl2gr1v firmware
- honeywell hbl6gr2 firmware
- honeywell hbw2gr1v firmware
- honeywell hbw2gr3v firmware
- honeywell hbw2per1 firmware
- honeywell hbw2per2 firmware
- honeywell hbw4gr1v firmware
- honeywell hbw4per1 firmware
- honeywell hbw4per2 firmware
- honeywell hbw4pgr1 firmware
- honeywell hbw8pr2 firmware
- honeywell hcd8g firmware
- honeywell hcl2g firmware
- honeywell hcl2gv firmware
- honeywell hcw2g firmware
- honeywell hcw2gv firmware
- honeywell hcw4g firmware
- honeywell hdz302d firmware
- honeywell hdz302de firmware
- honeywell hdz302din-c1 firmware
- honeywell hdz302din-s1 firmware
- honeywell hdz302lik firmware
- honeywell hdz302liw firmware
- honeywell hdzp252di firmware
- honeywell hdzp304di firmware
- honeywell hed2per3 firmware
- honeywell hepz302w0 firmware
- honeywell hew2per2 firmware
- honeywell hew2per3 firmware
- honeywell hew4per2b firmware
- honeywell hew4per3 firmware
- honeywell hew4per3b firmware
- honeywell hfd6gr1 firmware
- honeywell hfd8gr1 firmware
- honeywell hm4l8gr1 firmware
- honeywell hmbl8gr1 firmware
- honeywell hpw2p1 firmware
- honeywell hsw2g1 firmware
- honeywell hswb2g1 firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2019-18226 is a critical vulnerability (CVSS 9.8) in Honeywell H2w2gr1 Firmware, published October 31, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.37%, the 72nd percentile. No source names a fixed version.