CVE-2019-18226 Auth bypass in Honeywell equIP series cameras, Honeywell Performance series IP cameras, Honeywell recorders
Attackers can bypass authentication on Honeywell IP cameras and recorders via replay attacks due to weak legacy authentication methods.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-18226?
CVE-2019-18226 is a critical authentication bypass vulnerability in Honeywell equIP series cameras, Honeywell Performance series IP cameras, Honeywell recorders, published on 31 Oct 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Honeywell equIP series and Performance series IP cameras and recorders, A vulnerability exists in the affected products where IP cameras and recorders have a potential replay attack vulnerability as a weak authentication method is retained for compatibility with legacy products.
Weakness: CWE-294
Which versions are affected by CVE-2019-18226?
It affects 64 products.
Products include Honeywell H2w2gr1 Firmware, Honeywell H2w2pc1m Firmware, Honeywell H2w2per3 Firmware, Honeywell H2w4per3 Firmware, Honeywell H3w2gr1 Firmware, Honeywell H3w2gr1v Firmware and 58 more.
How do I fix CVE-2019-18226?
No fix has been published for CVE-2019-18226 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2019-18226 being exploited?
There is no known exploitation of CVE-2019-18226 in the wild and no public exploit code.
Other vulnerabilities in Honeywell equIP series cameras, Honeywell Performance series IP cameras, Honeywell recorders
Sources
Also known as GHSA-j9vx-r62j-mx34.