{"id":"CVE-2019-18230","aliases":["EUVD-2019-8030","GHSA-vj77-88vg-hq2h"],"status":"published","title":"Honeywell equIP and Performance series IP cameras, multiple versions, A vulnerability exists...","description":"Honeywell equIP and Performance series IP cameras, multiple versions, A vulnerability exists where the affected product allows unauthenticated access to audio streaming over HTTP.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01132,"percentile":0.66671,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-306"],"published":"2019-10-31T21:15:32Z","modified":"2026-06-17T02:24:39Z","products":[{"vendor":"honeywell","product":"h2w2gr1_firmware"},{"vendor":"honeywell","product":"h3w2gr1_firmware"},{"vendor":"honeywell","product":"h3w2gr1v_firmware"},{"vendor":"honeywell","product":"h3w2gr2_firmware"},{"vendor":"honeywell","product":"h3w4gr1_firmware"},{"vendor":"honeywell","product":"h3w4gr1v_firmware"},{"vendor":"honeywell","product":"h4d8gr1_firmware"},{"vendor":"honeywell","product":"h4d8pr1_firmware"},{"vendor":"honeywell","product":"h4l2gr1_firmware"},{"vendor":"honeywell","product":"h4l2gr1v_firmware"},{"vendor":"honeywell","product":"h4l6gr2_firmware"},{"vendor":"honeywell","product":"h4lggr2_firmware"},{"vendor":"honeywell","product":"h4w2gr1_firmware"},{"vendor":"honeywell","product":"h4w2gr1v_firmware"},{"vendor":"honeywell","product":"h4w2gr2_firmware"},{"vendor":"honeywell","product":"h4w4gr1_firmware"},{"vendor":"honeywell","product":"h4w4gr1v_firmware"},{"vendor":"honeywell","product":"hbd8gr1_firmware"},{"vendor":"honeywell","product":"hbl2gr1_firmware"},{"vendor":"honeywell","product":"hbl2gr1v_firmware"},{"vendor":"honeywell","product":"hbl6gr2_firmware"},{"vendor":"honeywell","product":"hbw2gr1_firmware"},{"vendor":"honeywell","product":"hbw2gr1v_firmware"},{"vendor":"honeywell","product":"hbw2gr3_firmware"},{"vendor":"honeywell","product":"hbw2gr3v_firmware"},{"vendor":"honeywell","product":"hbw4gr1_firmware"},{"vendor":"honeywell","product":"hbw4gr1v_firmware"},{"vendor":"honeywell","product":"hcd8g_firmware"},{"vendor":"honeywell","product":"hcl2g_firmware"},{"vendor":"honeywell","product":"hcl2gv_firmware"},{"vendor":"honeywell","product":"hcw2g_firmware"},{"vendor":"honeywell","product":"hcw2gv_firmware"},{"vendor":"honeywell","product":"hcw4g_firmware"},{"vendor":"honeywell","product":"hdz302d_firmware"},{"vendor":"honeywell","product":"hdz302de_firmware"},{"vendor":"honeywell","product":"hdz302din-c1_firmware"},{"vendor":"honeywell","product":"hdz302din-s1_firmware"},{"vendor":"honeywell","product":"hdz302din_firmware"},{"vendor":"honeywell","product":"hdz302lik_firmware"},{"vendor":"honeywell","product":"hdz302liw_firmware"},{"vendor":"honeywell","product":"hdzp252di_firmware"},{"vendor":"honeywell","product":"hdzp304di_firmware"},{"vendor":"honeywell","product":"hfd5pr1_firmware"},{"vendor":"honeywell","product":"hfd6gr1_firmware"},{"vendor":"honeywell","product":"hfd8gr1_firmware"},{"vendor":"honeywell","product":"hm4l8gr1_firmware"},{"vendor":"honeywell","product":"hmbl8gr1_firmware"},{"vendor":"honeywell","product":"hpw2p1_firmware"}],"references":[{"url":"https://www.us-cert.gov/ics/advisories/icsa-19-304-03","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-18230"},{"url":"https://github.com/advisories/GHSA-vj77-88vg-hq2h"}],"sources":{"cve":[{"id":"CVE-2019-18230","description":"Honeywell equIP and Performance series IP cameras, multiple versions, A vulnerability exists where the affected product allows unauthenticated access to audio streaming over HTTP.","status":"published","published":"2019-10-31T21:15:32Z","modified":"2024-08-05T01:47:14.024Z","cwes":["CWE-306"],"updated_at":"2026-11-02T14:32:23.803059Z"}],"euvd":[{"id":"EUVD-2019-8030","description":"Honeywell equIP and Performance series IP cameras, multiple versions, A vulnerability exists where the affected product allows unauthenticated access to audio streaming over HTTP.","status":"published","published":"2019-10-31T21:15:32Z","modified":"2024-08-05T01:47:14Z","updated_at":"2026-11-03T02:40:28.860423Z"}],"ghsa":[{"id":"GHSA-vj77-88vg-hq2h","title":"Honeywell equIP and Performance series IP cameras, multiple versions, A vulnerability exists...","description":"Honeywell equIP and Performance series IP cameras, multiple versions, A vulnerability exists where the affected product allows unauthenticated access to audio streaming over HTTP.","status":"published","published":"2022-05-24T17:00:15Z","modified":"2024-04-04T02:38:19Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-306"],"updated_at":"2026-11-02T14:56:09.967552Z"}],"nvd":[{"id":"CVE-2019-18230","description":"Honeywell equIP and Performance series IP cameras, multiple versions, A vulnerability exists where the affected product allows unauthenticated access to audio streaming over HTTP.","status":"published","published":"2019-10-31T22:15:11.08Z","modified":"2026-06-17T02:24:39.843Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-306"],"updated_at":"2026-11-02T14:05:32.982925Z"}]}}