CVE-2019-18230: Honeywell h2w2gr1 Firmware

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

Honeywell equIP and Performance series IP cameras, multiple versions, A vulnerability exists where the affected product allows unauthenticated access to audio streaming over HTTP.

Affected products

  • Honeywell h2w2gr1 Firmware: before 1.000.0000.18.20190409 (fixed in 1.000.0000.18.20190409)
  • Honeywell h3w2gr1 Firmware: before 1.000.hw00.21.20190812 (fixed in 1.000.hw00.21.20190812)
  • Honeywell h3w2gr1v Firmware: before 1.000.0000.18.20190409 (fixed in 1.000.0000.18.20190409)
  • Honeywell h3w2gr2 Firmware: before 1.000.hw00.21.20190812 (fixed in 1.000.hw00.21.20190812)
  • Honeywell h3w4gr1 Firmware: before 1.000.hw00.21.20190812 (fixed in 1.000.hw00.21.20190812)
  • Honeywell h3w4gr1v Firmware: before 1.000.0000.18.20190409 (fixed in 1.000.0000.18.20190409)
  • Honeywell h4d8gr1 Firmware: before 2.420.hw00.9.20180510 (fixed in 2.420.hw00.9.20180510)
  • Honeywell h4d8pr1 Firmware: before 1.000.hw01.3.20190820 (fixed in 1.000.hw01.3.20190820)
  • Honeywell h4l2gr1 Firmware: before 1.000.0000.18.20190423 (fixed in 1.000.0000.18.20190423)
  • Honeywell h4l2gr1v Firmware: before 1.000.0000.18.20190423 (fixed in 1.000.0000.18.20190423)
  • Honeywell h4l6gr2 Firmware: before 1.000.hw02.8.20190813 (fixed in 1.000.hw02.8.20190813)
  • Honeywell h4lggr2 Firmware: before 1.000.hw04.3.20190813 (fixed in 1.000.hw04.3.20190813)
  • Honeywell h4w2gr1 Firmware: before 1.000.hw00.21.20190812 (fixed in 1.000.hw00.21.20190812)
  • Honeywell h4w2gr1v Firmware: before 1.000.0000.18.20190409 (fixed in 1.000.0000.18.20190409)
  • Honeywell h4w2gr2 Firmware: before 1.000.hw00.21.20190812 (fixed in 1.000.hw00.21.20190812)
  • Honeywell h4w4gr1 Firmware: before 1.000.hw00.21.20190812 (fixed in 1.000.hw00.21.20190812)
  • Honeywell h4w4gr1v Firmware: before 1.000.0000.18.20190409 (fixed in 1.000.0000.18.20190409)
  • Honeywell HBD8GR1 Firmware: before 2.420.hw00.9.20180510 (fixed in 2.420.hw00.9.20180510)
  • Honeywell HBL2GR1 Firmware: before 2.420.hw01.33.20190812 (fixed in 2.420.hw01.33.20190812)
  • Honeywell HBL2GR1V Firmware: before 1.000.0000.18.20190423 (fixed in 1.000.0000.18.20190423)
  • Honeywell HBL6GR2 Firmware: before 1.000.hw04.3.20190813 (fixed in 1.000.hw04.3.20190813); before 1.000.hw02.8.20190813 (fixed in 1.000.hw02.8.20190813)
  • Honeywell HBW2GR1 Firmware: before 1.000.hw00.21.20190812 (fixed in 1.000.hw00.21.20190812)
  • Honeywell HBW2GR1V Firmware: before 1.000.0000.18.20190409 (fixed in 1.000.0000.18.20190409)
  • Honeywell HBW2GR3 Firmware: before 1.000.hw00.21.20190812 (fixed in 1.000.hw00.21.20190812)
  • Honeywell HBW2GR3V Firmware: before 1.000.0000.18.20190409 (fixed in 1.000.0000.18.20190409)
  • and 23 more

Published 2019-10-31. Last modified 2026-06-17.