CVE-2019-18226: Honeywell h2w2gr1 Firmware

Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days.

Honeywell equIP series and Performance series IP cameras and recorders, A vulnerability exists in the affected products where IP cameras and recorders have a potential replay attack vulnerability as a weak authentication method is retained for compatibility with legacy products.

Affected products

  • Honeywell h2w2gr1 Firmware: affected versions not specified
  • Honeywell h2w2pc1m Firmware: affected versions not specified
  • Honeywell h2w2per3 Firmware: affected versions not specified
  • Honeywell h2w4per3 Firmware: affected versions not specified
  • Honeywell h3w2gr1 Firmware: affected versions not specified
  • Honeywell h3w2gr1v Firmware: affected versions not specified
  • Honeywell h3w2gr2 Firmware: affected versions not specified
  • Honeywell h3w4gr1 Firmware: affected versions not specified
  • Honeywell h3w4gr1v Firmware: affected versions not specified
  • Honeywell h4d8gr1 Firmware: affected versions not specified
  • Honeywell h4l2gr1 Firmware: affected versions not specified
  • Honeywell h4l2gr1v Firmware: affected versions not specified
  • Honeywell h4l6gr2 Firmware: affected versions not specified
  • Honeywell h4w2gr1 Firmware: affected versions not specified
  • Honeywell h4w2gr1v Firmware: affected versions not specified
  • Honeywell h4w2gr2 Firmware: affected versions not specified
  • Honeywell h4w2per2 Firmware: affected versions not specified
  • Honeywell h4w2per3 Firmware: affected versions not specified
  • Honeywell h4w4gr1 Firmware: affected versions not specified
  • Honeywell h4w4gr1v Firmware: affected versions not specified
  • Honeywell h4w4per2 Firmware: affected versions not specified
  • Honeywell h4w4per3 Firmware: affected versions not specified
  • Honeywell h4w8pr2 Firmware: affected versions not specified
  • Honeywell HBD2PER1 Firmware: affected versions not specified
  • Honeywell HBD8GR1 Firmware: affected versions not specified
  • and 39 more

Published 2019-10-31. Last modified 2026-06-17.