CVE-2019-18228 Denial of service in Honeywell equIP series IP cameras
A specially crafted HTTP packet request can cause a denial of service in Honeywell equIP series IP cameras.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-18228?
CVE-2019-18228 is a high-severity denial of service vulnerability in Honeywell equIP series IP cameras, published on 31 Oct 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Honeywell equIP series IP cameras Multiple equIP Series Cameras, A vulnerability exists in the affected products where a specially crafted HTTP packet request could result in a denial of service.
Weakness: CWE-20
Which versions are affected by CVE-2019-18228?
It affects 25 products.
Products include Honeywell H2w2gr1 Firmware, Honeywell H2w2pc1m Firmware, Honeywell H2w2per3 Firmware, Honeywell H2w4per3 Firmware, Honeywell H4w2per2 Firmware, Honeywell H4w2per3 Firmware and 19 more.
How do I fix CVE-2019-18228?
No fix has been published for CVE-2019-18228 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2019-18228 being exploited?
There is no known exploitation of CVE-2019-18228 in the wild and no public exploit code.
Other vulnerabilities in Honeywell equIP series IP cameras
Sources
Also known as GHSA-79gg-6f4c-77r6.