CVE-2021-39363: Honeywell HBW2PER1 Firmware

Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days.

Honeywell HDZP252DI 1.00.HW02.4 and HBW2PER1 1.000.HW01.3 devices allow a video replay attack after ARP cache poisoning has been achieved.

Affected products

• Honeywell HBW2PER1 Firmware: version 1.000.hw01.3 only
• Honeywell HDZP252DI Firmware: version 1.00.hw02.4 only

Published 2022-02-24. Last modified 2026-06-17.