{"id":"CVE-2019-18226","aliases":["EUVD-2019-8026","GHSA-j9vx-r62j-mx34"],"status":"published","title":"Honeywell equIP series and Performance series IP cameras and recorders, A vulnerability exists in...","description":"Honeywell equIP series and Performance series IP cameras and recorders, A vulnerability exists in the affected products where IP cameras and recorders have a potential replay attack vulnerability as a weak authentication method is retained for compatibility with legacy products.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.0137,"percentile":0.72101,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-294"],"published":"2019-10-31T21:21:04Z","modified":"2026-06-17T02:24:39Z","products":[{"vendor":"honeywell","product":"h2w2gr1_firmware"},{"vendor":"honeywell","product":"h2w2pc1m_firmware"},{"vendor":"honeywell","product":"h2w2per3_firmware"},{"vendor":"honeywell","product":"h2w4per3_firmware"},{"vendor":"honeywell","product":"h3w2gr1_firmware"},{"vendor":"honeywell","product":"h3w2gr1v_firmware"},{"vendor":"honeywell","product":"h3w2gr2_firmware"},{"vendor":"honeywell","product":"h3w4gr1_firmware"},{"vendor":"honeywell","product":"h3w4gr1v_firmware"},{"vendor":"honeywell","product":"h4d8gr1_firmware"},{"vendor":"honeywell","product":"h4l2gr1_firmware"},{"vendor":"honeywell","product":"h4l2gr1v_firmware"},{"vendor":"honeywell","product":"h4l6gr2_firmware"},{"vendor":"honeywell","product":"h4w2gr1_firmware"},{"vendor":"honeywell","product":"h4w2gr1v_firmware"},{"vendor":"honeywell","product":"h4w2gr2_firmware"},{"vendor":"honeywell","product":"h4w2per2_firmware"},{"vendor":"honeywell","product":"h4w2per3_firmware"},{"vendor":"honeywell","product":"h4w4gr1_firmware"},{"vendor":"honeywell","product":"h4w4gr1v_firmware"},{"vendor":"honeywell","product":"h4w4per2_firmware"},{"vendor":"honeywell","product":"h4w4per3_firmware"},{"vendor":"honeywell","product":"h4w8pr2_firmware"},{"vendor":"honeywell","product":"hbd2per1_firmware"},{"vendor":"honeywell","product":"hbd8gr1_firmware"},{"vendor":"honeywell","product":"hbl2gr1v_firmware"},{"vendor":"honeywell","product":"hbl6gr2_firmware"},{"vendor":"honeywell","product":"hbw2gr1v_firmware"},{"vendor":"honeywell","product":"hbw2gr3v_firmware"},{"vendor":"honeywell","product":"hbw2per1_firmware"},{"vendor":"honeywell","product":"hbw2per2_firmware"},{"vendor":"honeywell","product":"hbw4gr1v_firmware"},{"vendor":"honeywell","product":"hbw4per1_firmware"},{"vendor":"honeywell","product":"hbw4per2_firmware"},{"vendor":"honeywell","product":"hbw4pgr1_firmware"},{"vendor":"honeywell","product":"hbw8pr2_firmware"},{"vendor":"honeywell","product":"hcd8g_firmware"},{"vendor":"honeywell","product":"hcl2g_firmware"},{"vendor":"honeywell","product":"hcl2gv_firmware"},{"vendor":"honeywell","product":"hcw2g_firmware"},{"vendor":"honeywell","product":"hcw2gv_firmware"},{"vendor":"honeywell","product":"hcw4g_firmware"},{"vendor":"honeywell","product":"hdz302d_firmware"},{"vendor":"honeywell","product":"hdz302de_firmware"},{"vendor":"honeywell","product":"hdz302din-c1_firmware"},{"vendor":"honeywell","product":"hdz302din-s1_firmware"},{"vendor":"honeywell","product":"hdz302lik_firmware"},{"vendor":"honeywell","product":"hdz302liw_firmware"},{"vendor":"honeywell","product":"hdzp252di_firmware"},{"vendor":"honeywell","product":"hdzp304di_firmware"},{"vendor":"honeywell","product":"hed2per3_firmware"},{"vendor":"honeywell","product":"hepz302w0_firmware"},{"vendor":"honeywell","product":"hew2per2_firmware"},{"vendor":"honeywell","product":"hew2per3_firmware"},{"vendor":"honeywell","product":"hew4per2b_firmware"},{"vendor":"honeywell","product":"hew4per3_firmware"},{"vendor":"honeywell","product":"hew4per3b_firmware"},{"vendor":"honeywell","product":"hfd6gr1_firmware"},{"vendor":"honeywell","product":"hfd8gr1_firmware"},{"vendor":"honeywell","product":"hm4l8gr1_firmware"},{"vendor":"honeywell","product":"hmbl8gr1_firmware"},{"vendor":"honeywell","product":"hpw2p1_firmware"},{"vendor":"honeywell","product":"hsw2g1_firmware"},{"vendor":"honeywell","product":"hswb2g1_firmware"}],"references":[{"url":"https://www.us-cert.gov/ics/advisories/icsa-19-304-04","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-18226"},{"url":"https://github.com/advisories/GHSA-j9vx-r62j-mx34"}],"sources":{"cve":[{"id":"CVE-2019-18226","description":"Honeywell equIP series and Performance series IP cameras and recorders, A vulnerability exists in the affected products where IP cameras and recorders have a potential replay attack vulnerability as a weak authentication method is retained for compatibility with legacy products.","status":"published","published":"2019-10-31T21:21:04Z","modified":"2024-08-05T01:47:14.078Z","cwes":["CWE-294"],"updated_at":"2026-11-02T14:32:23.803059Z"}],"euvd":[{"id":"EUVD-2019-8026","description":"Honeywell equIP series and Performance series IP cameras and recorders, A vulnerability exists in the affected products where IP cameras and recorders have a potential replay attack vulnerability as a weak authentication method is retained for compatibility with legacy products.","status":"published","published":"2019-10-31T21:21:04Z","modified":"2024-08-05T01:47:14Z","updated_at":"2026-11-03T02:40:28.860423Z"}],"ghsa":[{"id":"GHSA-j9vx-r62j-mx34","title":"Honeywell equIP series and Performance series IP cameras and recorders, A vulnerability exists in...","description":"Honeywell equIP series and Performance series IP cameras and recorders, A vulnerability exists in the affected products where IP cameras and recorders have a potential replay attack vulnerability as a weak authentication method is retained for compatibility with legacy products.","status":"published","published":"2022-05-24T17:00:14Z","modified":"2023-01-28T05:07:20Z","updated_at":"2026-11-02T14:44:31.117774Z"}],"nvd":[{"id":"CVE-2019-18226","description":"Honeywell equIP series and Performance series IP cameras and recorders, A vulnerability exists in the affected products where IP cameras and recorders have a potential replay attack vulnerability as a weak authentication method is retained for compatibility with legacy products.","status":"published","published":"2019-10-31T22:15:10.8Z","modified":"2026-06-17T02:24:39.133Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-294"],"updated_at":"2026-11-02T14:05:32.982925Z"}]}}