FKIE_CVE-2019-13523
Vulnerability from fkie_nvd - Published: 2019-09-26 16:15 - Updated: 2024-11-21 04:25
Severity ?
Summary
In Honeywell Performance IP Cameras and Performance NVRs, the integrated web server of the affected devices could allow remote attackers to obtain web configuration data in JSON format for IP cameras and NVRs (Network Video Recorders), which can be accessed without authentication over the network. Affected performance IP Cameras: HBD3PR2,H4D3PRV3,HED3PR3,H4D3PRV2,HBD3PR1,H4W8PR2,HBW8PR2,H2W2PC1M,H2W4PER3,H2W2PER3,HEW2PER3,HEW4PER3B,HBW2PER1,HEW4PER2,HEW4PER2B,HEW2PER2,H4W2PER2,HBW2PER2,H4W2PER3, and HPW2P1. Affected Performance Series NVRs: HEN08104,HEN08144,HEN081124,HEN16104,HEN16144,HEN16184,HEN16204,HEN162244,HEN16284,HEN16304,HEN16384,HEN32104,HEN321124,HEN32204,HEN32284,HEN322164,HEN32304, HEN32384,HEN323164,HEN64204,HEN64304,HEN643164,HEN643324,HEN643484,HEN04103,HEN04113,HEN04123,HEN08103,HEN08113,HEN08123,HEN08143,HEN16103,HEN16123,HEN16143,HEN16163,HEN04103L,HEN08103L,HEN16103L,HEN32103L.
References
| URL | Tags | ||
|---|---|---|---|
| ics-cert@hq.dhs.gov | https://www.us-cert.gov/ics/advisories/icsa-19-260-03 | Mitigation, Third Party Advisory, US Government Resource | |
| af854a3a-2127-422b-91ae-364da2661108 | https://www.us-cert.gov/ics/advisories/icsa-19-260-03 | Mitigation, Third Party Advisory, US Government Resource |
Impacted products
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hbd3pr2_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "63C97AF8-8107-438F-A0FE-6509BC285379",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hbd3pr2:-:*:*:*:*:*:*:*",
"matchCriteriaId": "063ECCED-CF22-499F-BAAA-877F0CD1C258",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:h4d3prv3_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A4E69A7E-D62E-4FCA-95D0-B49BB650A09F",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:h4d3prv3:-:*:*:*:*:*:*:*",
"matchCriteriaId": "2810325F-B33A-4F6F-95BA-F9AE23B4D59D",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hed3pr3_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "D04BCCE7-1CA7-4748-B1D0-BDBAAB0FEBAA",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hed3pr3:-:*:*:*:*:*:*:*",
"matchCriteriaId": "83643D38-2A04-4955-B02C-C822C040FB87",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:h4d3prv2_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "3347B19D-5888-4F76-BEB3-520D9B632D55",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:h4d3prv2:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4C861316-46BC-4E9C-8452-0E130B3336D9",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hbd3pr1_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "82B53790-A650-4B69-A91E-722CC736AC00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hbd3pr1:-:*:*:*:*:*:*:*",
"matchCriteriaId": "39D05A2D-CE87-462D-B55E-BA27EE3B78F1",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:h4w8pr2_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E1B7E0C1-B599-47CA-8D71-E5A0C5AAFE1A",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:h4w8pr2:-:*:*:*:*:*:*:*",
"matchCriteriaId": "717A6F11-8EA5-4F9A-9F78-8E51FBFB73A6",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hbw8pr2_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "AB898789-B3E5-49BB-91B8-10AA0D2056CE",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hbw8pr2:-:*:*:*:*:*:*:*",
"matchCriteriaId": "687F3108-76C3-4F22-8321-59A849017886",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:h2w2pc1m_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "94A1FD71-3A35-4175-9C80-8965F3A59D9F",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:h2w2pc1m:-:*:*:*:*:*:*:*",
"matchCriteriaId": "BA1EF7CE-9FA3-45DA-9047-052E27E16965",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:h2w4per3_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4FD65833-D4DA-42D4-904A-0CC96E53E7D7",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:h2w4per3:-:*:*:*:*:*:*:*",
"matchCriteriaId": "5AF4F78E-E768-4D54-A9A1-2C24FC49CB08",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:h2w2per3_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "6CA4E13F-70AA-46BB-BF1D-B3797D3BD302",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:h2w2per3:-:*:*:*:*:*:*:*",
"matchCriteriaId": "DBF28324-68A7-4862-A881-1187A68CA97E",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hew2per3_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "996AF0FE-AF0E-479F-8301-E55C42EE3E6B",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hew2per3:-:*:*:*:*:*:*:*",
"matchCriteriaId": "93D344FD-0DED-4017-B339-CA3BE5E201C7",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hew4per3b_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "B9032E95-1D90-497A-A0F1-A5A3221FDF7F",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hew4per3b:-:*:*:*:*:*:*:*",
"matchCriteriaId": "FFF24084-97F9-4645-9C75-824217FCE8B7",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hbw2per1_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "88C5B464-E5DD-4095-98F4-8695F7722C67",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hbw2per1:-:*:*:*:*:*:*:*",
"matchCriteriaId": "B8CA4A19-03EC-4142-B847-0EC8C14AC9D9",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hew4per2_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E1C92A07-047E-4AFF-BA53-6EDD81407F7C",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hew4per2:-:*:*:*:*:*:*:*",
"matchCriteriaId": "2B97E873-CB5C-46FB-A91A-A67C4DDE03C8",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hew4per2b_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "EC835EA6-56F0-4C62-9799-D8A9C661271B",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hew4per2b:-:*:*:*:*:*:*:*",
"matchCriteriaId": "FA9106C1-B426-497F-835E-F0CF53139573",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hew2per2_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "6FC032CC-68BE-4003-969E-A2AC07835D82",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hew2per2:-:*:*:*:*:*:*:*",
"matchCriteriaId": "6285BB52-C08F-4CBB-A03B-385B980A3420",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:h4w2per2_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "B10341D2-EF85-4067-A470-A263773DB8F7",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:h4w2per2:-:*:*:*:*:*:*:*",
"matchCriteriaId": "ACBD1C35-BC9F-471B-AFE9-56F2C0D31251",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hbw2per2_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "27BBC2DE-1191-43D8-8898-AE832157D689",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hbw2per2:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F272578E-2BF9-4827-8838-BF2441F7CD9C",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:h4w2per3_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "47754C91-13A3-4096-A9D5-5F1C8BB996F2",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:h4w2per3:-:*:*:*:*:*:*:*",
"matchCriteriaId": "1DD7DF8D-F530-4C08-8ADB-16A30A411DB1",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hpw2p1_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "D70E51AC-7B3C-4FD3-BBDF-7F42ACD86B48",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hpw2p1:-:*:*:*:*:*:*:*",
"matchCriteriaId": "414E3927-B8A6-4E57-972A-27DA0163167E",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hen08104_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "093252D9-1A3E-4B76-8F65-0FEE05615DC1",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hen08104:-:*:*:*:*:*:*:*",
"matchCriteriaId": "AFF66A77-A007-4632-82BB-2E429EF2AA27",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hen08144_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "61349DE2-23AB-45B4-BCB2-D1333E43E42B",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hen08144:-:*:*:*:*:*:*:*",
"matchCriteriaId": "B9AC3DBF-7DC5-4598-89F8-6E1C9152FB7F",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hen081124_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A477EBB3-A237-4A9D-9BD2-9A4BA35B5543",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hen081124:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4BF53058-BA72-43EB-A11E-A274B9FF7EC3",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hen16104_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "5EFA83DD-986C-428F-A640-05B576A38FBF",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hen16104:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E37E41A6-597B-494C-897B-729CFF69F3C9",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hen16144_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "B1835F7B-0F37-44B8-8603-244AF10CD240",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hen16144:-:*:*:*:*:*:*:*",
"matchCriteriaId": "5A9185F1-07C8-4895-9B28-EEAAD4BB647C",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hen16184_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "8630249A-D731-4A65-B451-C88D9F6FC8A0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hen16184:-:*:*:*:*:*:*:*",
"matchCriteriaId": "EB9DFFB1-DFAA-47DC-9923-A597D4D125A9",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hen16204_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "42F2988F-85F1-4EEE-B51D-C1A9E8E39770",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hen16204:-:*:*:*:*:*:*:*",
"matchCriteriaId": "84FC138F-AC25-4EEA-A453-9AA1DB888987",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hen162244_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "3F6DAB6B-3684-434A-8B0A-98EEA809650A",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hen162244:-:*:*:*:*:*:*:*",
"matchCriteriaId": "98593D4B-8ECB-4DE6-A2BE-A01561ED9C03",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hen16284_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "8B5774A9-D947-4E16-B2D3-D70A520D49C8",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hen16284:-:*:*:*:*:*:*:*",
"matchCriteriaId": "B723B8DD-EE23-412F-A07A-D6710183040B",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hen16304_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "17479F4F-054A-49FA-A324-0C22981BEA92",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hen16304:-:*:*:*:*:*:*:*",
"matchCriteriaId": "957CA4C7-EDA9-42F0-A1CA-7EC6AEEB62C4",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hen16384_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "6CFEC523-9C5F-4806-9F94-C6532D7ADB7E",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hen16384:-:*:*:*:*:*:*:*",
"matchCriteriaId": "BF144F90-5FAA-474C-B5D4-D3D1A8EACDB0",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hen32104_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "BA0FA70E-EBDA-4CE9-8D52-B4133F95C5D8",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hen32104:-:*:*:*:*:*:*:*",
"matchCriteriaId": "2F6E56E5-EF38-45E6-BF91-8A3DFC3897B5",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hen321124_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "CD513E4D-F967-445B-81B1-AF64B13D29D8",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hen321124:-:*:*:*:*:*:*:*",
"matchCriteriaId": "8661439E-52B8-4DEA-82F4-24DBE9AE2414",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hen32204_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "730387CA-2FCA-41E3-B935-55A191D7BBDF",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hen32204:-:*:*:*:*:*:*:*",
"matchCriteriaId": "FA75DE24-A397-4070-96BB-917011175C8A",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hen32284_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "87914E04-C149-40D9-86F5-35CAEB44D0B9",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hen32284:-:*:*:*:*:*:*:*",
"matchCriteriaId": "7E5EBB66-3926-4D00-ADF6-89F1D159E6D4",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hen322164_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "98BEFC04-4FE6-4B73-9E0A-16353929D341",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hen322164:-:*:*:*:*:*:*:*",
"matchCriteriaId": "5E962C93-70CB-44C5-B385-905A0B362854",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hen32304_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "8E518ECF-DB50-4E02-AFE7-24B0ABBFE7AF",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hen32304:-:*:*:*:*:*:*:*",
"matchCriteriaId": "53B4E62B-C35B-4359-A1F6-4DAD5665A3A0",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hen32384_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "84721AB9-5EA4-4CE2-91D3-D88FF299E90C",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hen32384:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F5788B94-52EF-482D-969F-B207D34A216D",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hen323164_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "BCEBA529-0FC7-4C18-9235-0F73D36AB655",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hen323164:-:*:*:*:*:*:*:*",
"matchCriteriaId": "BCD29B9C-E3A2-46C2-90D1-A86944685FA3",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hen64204_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "3AA0E733-9EAD-4650-91AE-5319010F364A",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hen64204:-:*:*:*:*:*:*:*",
"matchCriteriaId": "1D08912B-4BA0-44CF-A75D-361A5CB74C78",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hen64304_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "C978C27A-517B-4D29-A254-7EDA96BE84EC",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hen64304:-:*:*:*:*:*:*:*",
"matchCriteriaId": "0AD72AD2-312F-417A-98F6-B9C6923540D7",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hen643164_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F6561F82-8001-4D1C-B714-973500D1B9BA",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hen643164:-:*:*:*:*:*:*:*",
"matchCriteriaId": "060580DA-5DB4-406D-89A5-2D97FB6B7194",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hen643324_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "BD8E8AB7-0122-4EDD-A21A-47ABCFF67062",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hen643324:-:*:*:*:*:*:*:*",
"matchCriteriaId": "59FB72C1-861C-4797-8DFC-2AC7D8D3C4C1",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hen643484_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "49122A86-9B85-45F3-B172-D49D66B70A1F",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hen643484:-:*:*:*:*:*:*:*",
"matchCriteriaId": "AA889940-B338-4C47-9ECC-84CBF964CC5A",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hen04103_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "6A8BA020-0FD1-4624-9840-F9211EA1E779",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hen04103:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F2920BB5-7462-4A00-83A3-C5EAD7E7EB92",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hen04113_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "5D6140AA-2729-4EEA-BE1D-EB5AAE8117FE",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hen04113:-:*:*:*:*:*:*:*",
"matchCriteriaId": "7FE57F1E-0ECA-44CE-A788-A47261F16523",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hen04123_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "B6BC4E54-B52B-4AEF-B73C-7A920CC00E3A",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hen04123:-:*:*:*:*:*:*:*",
"matchCriteriaId": "764C5F20-3E34-4C59-8155-0D676B5DD78D",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hen08103_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A5211B18-1099-4289-87CD-4338B6B70C71",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hen08103:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4C49A809-510A-4442-8D3E-616E260F631F",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hen08113_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "76949C3F-D9C7-4062-855D-EDC21922389A",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hen08113:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F7BC668B-2A49-46CE-9A89-9463A803F54B",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hen08123_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A957ADC3-F3CA-4F36-8010-3A736F31E862",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hen08123:-:*:*:*:*:*:*:*",
"matchCriteriaId": "BDFA6BE5-1A74-43AA-ABCB-BD065017B9EF",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hen08143_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "16B5AE28-AC79-4452-8671-38DC1FE1EF50",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hen08143:-:*:*:*:*:*:*:*",
"matchCriteriaId": "5916E3A2-8D0C-443C-8A89-EE8F78922448",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hen16103_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "7394E4E3-9DC4-485F-B3C9-6F6D077BE36D",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hen16103:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F1D39F92-F428-45EA-98E1-6D5267F738E9",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hen16123_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "107B7B0B-7A41-47A2-B2CA-097D48A20F1A",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hen16123:-:*:*:*:*:*:*:*",
"matchCriteriaId": "41196895-7ECD-40E4-BF6E-D635D71B6ADD",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hen16143_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "48E55BB1-DE11-49A6-86BD-4DD3ECD3E695",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hen16143:-:*:*:*:*:*:*:*",
"matchCriteriaId": "AC46C1D7-4D11-4B12-8AFF-B76ECFA684B5",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hen16163_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "115CD99D-0AB4-473D-BAB8-DE75F6243E96",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hen16163:-:*:*:*:*:*:*:*",
"matchCriteriaId": "5B87ACF5-EAAA-40D8-AAEB-75528A7116D9",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hen04103l_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E583112F-739A-4480-93F8-4FBF77064FEF",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hen04103l:-:*:*:*:*:*:*:*",
"matchCriteriaId": "1E289303-53EF-43A1-AA6E-BE9A9D41923F",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hen08103l_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "59A57E78-9BBD-4990-8506-DD9806EDEF0D",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hen08103l:-:*:*:*:*:*:*:*",
"matchCriteriaId": "70952C0D-00A4-49D8-8D58-BD6B25EE6819",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hen16103l_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "81C7AE02-CA84-46A8-B049-70C65451F881",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hen16103l:-:*:*:*:*:*:*:*",
"matchCriteriaId": "2180D732-89FF-44AE-AFD5-3127DC68EC2F",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:honeywell:hen32103l_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "B650B4C8-D307-4354-8936-33D3B1F890C7",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:hen32103l:-:*:*:*:*:*:*:*",
"matchCriteriaId": "00386EE7-3418-4A26-9D76-6BD7884C7057",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "In Honeywell Performance IP Cameras and Performance NVRs, the integrated web server of the affected devices could allow remote attackers to obtain web configuration data in JSON format for IP cameras and NVRs (Network Video Recorders), which can be accessed without authentication over the network. Affected performance IP Cameras: HBD3PR2,H4D3PRV3,HED3PR3,H4D3PRV2,HBD3PR1,H4W8PR2,HBW8PR2,H2W2PC1M,H2W4PER3,H2W2PER3,HEW2PER3,HEW4PER3B,HBW2PER1,HEW4PER2,HEW4PER2B,HEW2PER2,H4W2PER2,HBW2PER2,H4W2PER3, and HPW2P1. Affected Performance Series NVRs: HEN08104,HEN08144,HEN081124,HEN16104,HEN16144,HEN16184,HEN16204,HEN162244,HEN16284,HEN16304,HEN16384,HEN32104,HEN321124,HEN32204,HEN32284,HEN322164,HEN32304, HEN32384,HEN323164,HEN64204,HEN64304,HEN643164,HEN643324,HEN643484,HEN04103,HEN04113,HEN04123,HEN08103,HEN08113,HEN08123,HEN08143,HEN16103,HEN16123,HEN16143,HEN16163,HEN04103L,HEN08103L,HEN16103L,HEN32103L."
},
{
"lang": "es",
"value": "En las c\u00e1maras IP y NVRs Honeywell Performance, el servidor web integrado de los dispositivos afectados podr\u00eda permitir a atacantes remotos obtener datos de configuraci\u00f3n web en formato JSON para c\u00e1maras IP y NVR (Network Video Recorders), que pueden ser accedidos sin autenticaci\u00f3n a trav\u00e9s de la red. C\u00e1maras IP Performance afectadas: HBD3PR2, H4D3PRV3, HED3PR3, H4D3PRV2, HBD3PR1, H4W8PR2, HBW8PR2, H2W2PC1M, H2W4PER3, H2W2PER3, HEW2PER3, HEW4PER3B, HBW2PER1, HEW4PER2, HEW4PER2B, HEW2PER2, H4W2PER2, HBW2PER2, H4W2PER3, y HPW2P1. NVRs Serie Performance afectados: HEN08104, HEN08144, HEN081124, HEN16104, HEN16144, HEN16184, HEN16204, HEN162244, HEN16284, HEN16304, HEN16384, HEN32104, HEN321124, HEN32204, HEN32284, HEN322164, HEN32304, HEN32384, HEN323164, HEN64204, HEN64304, HEN643164, HEN643324, HEN643484, HEN04103, HEN04113, HEN04123, HEN08103, HEN08113, HEN08123, HEN08143, HEN16103, HEN16123, HEN16143, HEN16163, HEN04103L, HEN08103L, HEN16103L, HEN32103L."
}
],
"id": "CVE-2019-13523",
"lastModified": "2024-11-21T04:25:04.220",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"exploitabilityScore": 3.9,
"impactScore": 1.4,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2019-09-26T16:15:11.067",
"references": [
{
"source": "ics-cert@hq.dhs.gov",
"tags": [
"Mitigation",
"Third Party Advisory",
"US Government Resource"
],
"url": "https://www.us-cert.gov/ics/advisories/icsa-19-260-03"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mitigation",
"Third Party Advisory",
"US Government Resource"
],
"url": "https://www.us-cert.gov/ics/advisories/icsa-19-260-03"
}
],
"sourceIdentifier": "ics-cert@hq.dhs.gov",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-200"
}
],
"source": "ics-cert@hq.dhs.gov",
"type": "Secondary"
},
{
"description": [
{
"lang": "en",
"value": "CWE-306"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…