CVE-2019-18230
Honeywell equIP and Performance series IP cameras, multiple versions, A vulnerability exists...
Honeywell equIP and Performance series IP cameras, multiple versions, A vulnerability exists where the affected product allows unauthenticated access to audio streaming over HTTP.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
Honeywell equIP and Performance series IP cameras, multiple versions, A vulnerability exists where the affected product allows unauthenticated access to audio streaming over HTTP.
- Record
CVE-2019-18230- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-306
- Updated
- 2026-11-02
CVE List No score
Honeywell equIP and Performance series IP cameras, multiple versions, A vulnerability exists where the affected product allows unauthenticated access to audio streaming over HTTP.
- Record
CVE-2019-18230- Weakness
- CWE-306
- Updated
- 2026-11-02
EUVDEUVD-2019-8030 No score
Honeywell equIP and Performance series IP cameras, multiple versions, A vulnerability exists where the affected product allows unauthenticated access to audio streaming over HTTP.
- Record
EUVD-2019-8030- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-vj77-88vg-hq2h
Honeywell equIP and Performance series IP cameras, multiple versions, A vulnerability exists...
Honeywell equIP and Performance series IP cameras, multiple versions, A vulnerability exists where the affected product allows unauthenticated access to audio streaming over HTTP.
- Record
GHSA-vj77-88vg-hq2h- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-306
- Updated
- 2026-11-02
Affected products
- honeywell h2w2gr1 firmware
- honeywell h3w2gr1 firmware
- honeywell h3w2gr1v firmware
- honeywell h3w2gr2 firmware
- honeywell h3w4gr1 firmware
- honeywell h3w4gr1v firmware
- honeywell h4d8gr1 firmware
- honeywell h4d8pr1 firmware
- honeywell h4l2gr1 firmware
- honeywell h4l2gr1v firmware
- honeywell h4l6gr2 firmware
- honeywell h4lggr2 firmware
Show 36 moreShow less
- honeywell h4w2gr1 firmware
- honeywell h4w2gr1v firmware
- honeywell h4w2gr2 firmware
- honeywell h4w4gr1 firmware
- honeywell h4w4gr1v firmware
- honeywell hbd8gr1 firmware
- honeywell hbl2gr1 firmware
- honeywell hbl2gr1v firmware
- honeywell hbl6gr2 firmware
- honeywell hbw2gr1 firmware
- honeywell hbw2gr1v firmware
- honeywell hbw2gr3 firmware
- honeywell hbw2gr3v firmware
- honeywell hbw4gr1 firmware
- honeywell hbw4gr1v firmware
- honeywell hcd8g firmware
- honeywell hcl2g firmware
- honeywell hcl2gv firmware
- honeywell hcw2g firmware
- honeywell hcw2gv firmware
- honeywell hcw4g firmware
- honeywell hdz302d firmware
- honeywell hdz302de firmware
- honeywell hdz302din-c1 firmware
- honeywell hdz302din-s1 firmware
- honeywell hdz302din firmware
- honeywell hdz302lik firmware
- honeywell hdz302liw firmware
- honeywell hdzp252di firmware
- honeywell hdzp304di firmware
- honeywell hfd5pr1 firmware
- honeywell hfd6gr1 firmware
- honeywell hfd8gr1 firmware
- honeywell hm4l8gr1 firmware
- honeywell hmbl8gr1 firmware
- honeywell hpw2p1 firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2019-18230 is a high vulnerability (CVSS 7.5) in Honeywell H2w2gr1 Firmware, published October 31, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.13%, the 66th percentile. No source names a fixed version.