CVE-2019-13523: Honeywell h2w2pc1m Firmware

Medium severity, CVSS 5.3. EPSS: 1.8% chance of exploitation in the next 30 days.

In Honeywell Performance IP Cameras and Performance NVRs, the integrated web server of the affected devices could allow remote attackers to obtain web configuration data in JSON format for IP cameras and NVRs (Network Video Recorders), which can be accessed without authentication over the network. Affected performance IP Cameras: HBD3PR2,H4D3PRV3,HED3PR3,H4D3PRV2,HBD3PR1,H4W8PR2,HBW8PR2,H2W2PC1M,H2W4PER3,H2W2PER3,HEW2PER3,HEW4PER3B,HBW2PER1,HEW4PER2,HEW4PER2B,HEW2PER2,H4W2PER2,HBW2PER2,H4W2PER3, and HPW2P1. Affected Performance Series NVRs: HEN08104,HEN08144,HEN081124,HEN16104,HEN16144,HEN16184,HEN16204,HEN162244,HEN16284,HEN16304,HEN16384,HEN32104,HEN321124,HEN32204,HEN32284,HEN322164,HEN32304, HEN32384,HEN323164,HEN64204,HEN64304,HEN643164,HEN643324,HEN643484,HEN04103,HEN04113,HEN04123,HEN08103,HEN08113,HEN08123,HEN08143,HEN16103,HEN16123,HEN16143,HEN16163,HEN04103L,HEN08103L,HEN16103L,HEN32103L.

Affected products

  • Honeywell h2w2pc1m Firmware: affected versions not specified
  • Honeywell h2w2per3 Firmware: affected versions not specified
  • Honeywell h2w4per3 Firmware: affected versions not specified
  • Honeywell h4d3prv2 Firmware: affected versions not specified
  • Honeywell h4d3prv3 Firmware: affected versions not specified
  • Honeywell h4w2per2 Firmware: affected versions not specified
  • Honeywell h4w2per3 Firmware: affected versions not specified
  • Honeywell h4w8pr2 Firmware: affected versions not specified
  • Honeywell HBD3PR1 Firmware: affected versions not specified
  • Honeywell HBD3PR2 Firmware: affected versions not specified
  • Honeywell HBW2PER1 Firmware: affected versions not specified
  • Honeywell HBW2PER2 Firmware: affected versions not specified
  • Honeywell HBW8PR2 Firmware: affected versions not specified
  • Honeywell HED3PR3 Firmware: affected versions not specified
  • Honeywell HEN04103 Firmware: affected versions not specified
  • Honeywell HEN04103L Firmware: affected versions not specified
  • Honeywell HEN04113 Firmware: affected versions not specified
  • Honeywell HEN04123 Firmware: affected versions not specified
  • Honeywell HEN08103 Firmware: affected versions not specified
  • Honeywell HEN08103L Firmware: affected versions not specified
  • Honeywell HEN08104 Firmware: affected versions not specified
  • Honeywell HEN081124 Firmware: affected versions not specified
  • Honeywell HEN08113 Firmware: affected versions not specified
  • Honeywell HEN08123 Firmware: affected versions not specified
  • Honeywell HEN08143 Firmware: affected versions not specified
  • and 34 more

Published 2019-09-26. Last modified 2026-06-17.