CVE-2019-18228

moderate-risk
Published 2019-10-31

Honeywell equIP series IP cameras Multiple equIP Series Cameras, A vulnerability exists in the affected products where a specially crafted HTTP packet request could result in a denial of service.

Do I need to act?

-
0.55% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
7
CVSS 7.5/10 High
NETWORK / LOW complexity

Affected Products (20)

H2W2Pc1M Firmware
H2W2Per3 Firmware
H2W4Per3 Firmware
H4W2Per2 Firmware
H4W2Per3 Firmware
H4W4Per2 Firmware
H4W4Per3 Firmware
H4W8Pr2 Firmware
Hbd2Per1 Firmware
Hbw2Per1 Firmware
Hbw2Per2 Firmware
Hbw4Per1 Firmware
Hbw4Per2 Firmware
Hbw4Pgr1 Firmware
Hbw8Pr2 Firmware
Hed2Per3 Firmware
Hew2Per2 Firmware
Hew2Per3 Firmware
Hew4Per2B Firmware
Hew4Per3 Firmware

Affected Vendors

Honeywell

References (2)

Third Party Advisory https://www.us-cert.gov/ics/advisories/icsa-19-304-02
Third Party Advisory https://www.us-cert.gov/ics/advisories/icsa-19-304-02
49
/ 100
moderate-risk
Severity 26/34 · High
Exploitability 2/34 · Minimal
Exposure 21/34 · High