CVE-2021-39364: Honeywell HBW2PER1 Firmware

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

Honeywell HDZP252DI 1.00.HW02.4 and HBW2PER1 1.000.HW01.3 devices allow command spoofing (for camera control) after ARP cache poisoning has been achieved.

Affected products

• Honeywell HBW2PER1 Firmware: version 1.000.hw01.3 only
• Honeywell HDZP252DI Firmware: version 1.00.hw02.4 only

Published 2022-02-24. Last modified 2026-06-17.