CVE-2019-13523 MEDIUM

Published: 2019-09-26 | Last Modified: 2026-06-17 | Status: Modified

Description

In Honeywell Performance IP Cameras and Performance NVRs, the integrated web server of the affected devices could allow remote attackers to obtain web configuration data in JSON format for IP cameras and NVRs (Network Video Recorders), which can be accessed without authentication over the network. Affected performance IP Cameras: HBD3PR2,H4D3PRV3,HED3PR3,H4D3PRV2,HBD3PR1,H4W8PR2,HBW8PR2,H2W2PC1M,H2W4PER3,H2W2PER3,HEW2PER3,HEW4PER3B,HBW2PER1,HEW4PER2,HEW4PER2B,HEW2PER2,H4W2PER2,HBW2PER2,H4W2PER3, and HPW2P1. Affected Performance Series NVRs: HEN08104,HEN08144,HEN081124,HEN16104,HEN16144,HEN16184,HEN16204,HEN162244,HEN16284,HEN16304,HEN16384,HEN32104,HEN321124,HEN32204,HEN32284,HEN322164,HEN32304, HEN32384,HEN323164,HEN64204,HEN64304,HEN643164,HEN643324,HEN643484,HEN04103,HEN04113,HEN04123,HEN08103,HEN08113,HEN08123,HEN08143,HEN16103,HEN16123,HEN16143,HEN16163,HEN04103L,HEN08103L,HEN16103L,HEN32103L.

Additional Descriptions (1)

En las cámaras IP y NVRs Honeywell Performance, el servidor web integrado de los dispositivos afectados podría permitir a atacantes remotos obtener datos de configuración web en formato JSON para cámaras IP y NVR (Network Video Recorders), que pueden ser accedidos sin autenticación a través de la red. Cámaras IP Performance afectadas: HBD3PR2, H4D3PRV3, HED3PR3, H4D3PRV2, HBD3PR1, H4W8PR2, HBW8PR2, H2W2PC1M, H2W4PER3, H2W2PER3, HEW2PER3, HEW4PER3B, HBW2PER1, HEW4PER2, HEW4PER2B, HEW2PER2, H4W2PER2, HBW2PER2, H4W2PER3, y HPW2P1. NVRs Serie Performance afectados: HEN08104, HEN08144, HEN081124, HEN16104, HEN16144, HEN16184, HEN16204, HEN162244, HEN16284, HEN16304, HEN16384, HEN32104, HEN321124, HEN32204, HEN32284, HEN322164, HEN32304, HEN32384, HEN323164, HEN64204, HEN64304, HEN643164, HEN643324, HEN643484, HEN04103, HEN04113, HEN04123, HEN08103, HEN08113, HEN08123, HEN08143, HEN16103, HEN16123, HEN16143, HEN16163, HEN04103L, HEN08103L, HEN16103L, HEN32103L.

CVSS Metrics

Base Score: 5.3 (MEDIUM)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Attack Vector	NETWORK
Attack Complexity	LOW
Privileges Required	NONE
User Interaction	NONE
Scope	UNCHANGED
Confidentiality Impact	LOW
Integrity Impact	NONE
Availability Impact	NONE

Source: [email protected]

Type: Primary

Exploitability Score: 3.9

Impact Score: 1.4

Base Score: 5.0 (MEDIUM)

AV:N/AC:L/Au:N/C:P/I:N/A:N

Access Vector	NETWORK
Access Complexity	LOW
Authentication	NONE
Confidentiality Impact	PARTIAL
Integrity Impact	NONE
Availability Impact	NONE

Source: [email protected]

Type: Primary

Exploitability Score: 10.0

Impact Score: 2.9

Weaknesses

Source	Type	Description
[email protected]	Secondary	en CWE-200
[email protected]	Primary	en CWE-306

Affected Products

Vendor	Product	Version	Update	Type
honeywell	hbd3pr2_firmware	-	<built-in method update of dict object at 0x7c3bf397a1c0>	Operating System
honeywell	h4d3prv3_firmware	-	<built-in method update of dict object at 0x7c3bf3e61ac0>	Operating System
honeywell	hed3pr3_firmware	-	<built-in method update of dict object at 0x7c3c4777ea80>	Operating System
honeywell	h4d3prv2_firmware	-	<built-in method update of dict object at 0x7c3de667e900>	Operating System
honeywell	hbd3pr1_firmware	-	<built-in method update of dict object at 0x7c3c3372c400>	Operating System
honeywell	h4w8pr2_firmware	-	<built-in method update of dict object at 0x7c3bf3b6afc0>	Operating System
honeywell	hbw8pr2_firmware	-	<built-in method update of dict object at 0x7c3c3372d480>	Operating System
honeywell	h2w2pc1m_firmware	-	<built-in method update of dict object at 0x7c3c32d50500>	Operating System
honeywell	h2w4per3_firmware	-	<built-in method update of dict object at 0x7c3c32bcac00>	Operating System
honeywell	h2w2per3_firmware	-	<built-in method update of dict object at 0x7c3bf3e60e80>	Operating System
honeywell	hew2per3_firmware	-	<built-in method update of dict object at 0x7c3c32bcb800>	Operating System
honeywell	hew4per3b_firmware	-	<built-in method update of dict object at 0x7c3c32bc84c0>	Operating System
honeywell	hbw2per1_firmware	-	<built-in method update of dict object at 0x7c3bf2b263c0>	Operating System
honeywell	hew4per2_firmware	-	<built-in method update of dict object at 0x7c3bf2525ec0>	Operating System
honeywell	hew4per2b_firmware	-	<built-in method update of dict object at 0x7c3bf2526d00>	Operating System
honeywell	hew2per2_firmware	-	<built-in method update of dict object at 0x7c3bf2551740>	Operating System
honeywell	h4w2per2_firmware	-	<built-in method update of dict object at 0x7c3c3372e9c0>	Operating System
honeywell	hbw2per2_firmware	-	<built-in method update of dict object at 0x7c3bf2b24a40>	Operating System
honeywell	h4w2per3_firmware	-	<built-in method update of dict object at 0x7c3c3372d400>	Operating System
honeywell	hpw2p1_firmware	-	<built-in method update of dict object at 0x7c3bf397ac00>	Operating System
honeywell	hen08104_firmware	-	<built-in method update of dict object at 0x7c3c2975a6c0>	Operating System
honeywell	hen08144_firmware	-	<built-in method update of dict object at 0x7c3c3372f340>	Operating System
honeywell	hen081124_firmware	-	<built-in method update of dict object at 0x7c3bf3e61a80>	Operating System
honeywell	hen16104_firmware	-	<built-in method update of dict object at 0x7c3c32d51cc0>	Operating System
honeywell	hen16144_firmware	-	<built-in method update of dict object at 0x7c3c3372f580>	Operating System
honeywell	hen16184_firmware	-	<built-in method update of dict object at 0x7c3bf39786c0>	Operating System
honeywell	hen16204_firmware	-	<built-in method update of dict object at 0x7c3c3372cdc0>	Operating System
honeywell	hen162244_firmware	-	<built-in method update of dict object at 0x7c3bf3b616c0>	Operating System
honeywell	hen16284_firmware	-	<built-in method update of dict object at 0x7c3c40d52080>	Operating System
honeywell	hen16304_firmware	-	<built-in method update of dict object at 0x7c3bf3979240>	Operating System
honeywell	hen16384_firmware	-	<built-in method update of dict object at 0x7c3bf2b24500>	Operating System
honeywell	hen32104_firmware	-	<built-in method update of dict object at 0x7c3bf2b27600>	Operating System
honeywell	hen321124_firmware	-	<built-in method update of dict object at 0x7c3bf2b25800>	Operating System
honeywell	hen32204_firmware	-	<built-in method update of dict object at 0x7c3bf2b25400>	Operating System
honeywell	hen32284_firmware	-	<built-in method update of dict object at 0x7c3bf1844cc0>	Operating System
honeywell	hen322164_firmware	-	<built-in method update of dict object at 0x7c3bf3b7ba80>	Operating System
honeywell	hen32304_firmware	-	<built-in method update of dict object at 0x7c3c48154940>	Operating System
honeywell	hen32384_firmware	-	<built-in method update of dict object at 0x7c3bf3b7b700>	Operating System
honeywell	hen323164_firmware	-	<built-in method update of dict object at 0x7c3c4777f240>	Operating System
honeywell	hen64204_firmware	-	<built-in method update of dict object at 0x7c3c2975bd40>	Operating System
honeywell	hen64304_firmware	-	<built-in method update of dict object at 0x7c3c40d52780>	Operating System
honeywell	hen643164_firmware	-	<built-in method update of dict object at 0x7c3bf397ba00>	Operating System
honeywell	hen643324_firmware	-	<built-in method update of dict object at 0x7c3c32d51140>	Operating System
honeywell	hen643484_firmware	-	<built-in method update of dict object at 0x7c3c32d50040>	Operating System
honeywell	hen04103_firmware	-	<built-in method update of dict object at 0x7c3c3372e540>	Operating System
honeywell	hen04113_firmware	-	<built-in method update of dict object at 0x7c3c32d53440>	Operating System
honeywell	hen04123_firmware	-	<built-in method update of dict object at 0x7c3c3372c780>	Operating System
honeywell	hen08103_firmware	-	<built-in method update of dict object at 0x7c3c483c8980>	Operating System
honeywell	hen08113_firmware	-	<built-in method update of dict object at 0x7c3c2975bf00>	Operating System
honeywell	hen08123_firmware	-	<built-in method update of dict object at 0x7c3bf3b790c0>	Operating System
honeywell	hen08143_firmware	-	<built-in method update of dict object at 0x7c3bf25517c0>	Operating System
honeywell	hen16103_firmware	-	<built-in method update of dict object at 0x7c3c33db7e80>	Operating System
honeywell	hen16123_firmware	-	<built-in method update of dict object at 0x7c3bf2b27540>	Operating System
honeywell	hen16143_firmware	-	<built-in method update of dict object at 0x7c3bf2b25b80>	Operating System
honeywell	hen16163_firmware	-	<built-in method update of dict object at 0x7c3bf2b26ec0>	Operating System
honeywell	hen04103l_firmware	-	<built-in method update of dict object at 0x7c3bf2b256c0>	Operating System
honeywell	hen08103l_firmware	-	<built-in method update of dict object at 0x7c3bf2b250c0>	Operating System
honeywell	hen16103l_firmware	-	<built-in method update of dict object at 0x7c3bf2b24e80>	Operating System
honeywell	hen32103l_firmware	-	<built-in method update of dict object at 0x7c3bf2b25500>	Operating System

Affected Configurations

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hbd3pr2_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hbd3pr2:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:h4d3prv3_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:h4d3prv3:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hed3pr3_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hed3pr3:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:h4d3prv2_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:h4d3prv2:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hbd3pr1_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hbd3pr1:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:h4w8pr2_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:h4w8pr2:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hbw8pr2_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hbw8pr2:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:h2w2pc1m_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:h2w2pc1m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:h2w4per3_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:h2w4per3:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:h2w2per3_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:h2w2per3:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hew2per3_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hew2per3:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hew4per3b_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hew4per3b:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hbw2per1_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hbw2per1:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hew4per2_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hew4per2:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hew4per2b_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hew4per2b:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hew2per2_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hew2per2:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:h4w2per2_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:h4w2per2:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hbw2per2_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hbw2per2:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:h4w2per3_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:h4w2per3:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hpw2p1_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hpw2p1:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen08104_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen08104:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen08144_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen08144:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen081124_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen081124:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen16104_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen16104:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen16144_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen16144:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen16184_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen16184:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen16204_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen16204:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen162244_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen162244:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen16284_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen16284:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen16304_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen16304:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen16384_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen16384:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen32104_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen32104:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen321124_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen321124:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen32204_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen32204:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen32284_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen32284:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen322164_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen322164:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen32304_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen32304:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen32384_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen32384:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen323164_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen323164:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen64204_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen64204:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen64304_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen64304:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen643164_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen643164:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen643324_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen643324:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen643484_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen643484:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen04103_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen04103:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen04113_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen04113:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen04123_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen04123:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen08103_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen08103:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen08113_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen08113:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen08123_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen08123:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen08143_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen08143:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen16103_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen16103:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen16123_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen16123:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen16143_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen16143:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen16163_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen16163:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen04103l_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen04103l:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen08103l_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen08103l:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen16103l_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen16103l:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen32103l_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen32103l:-:::::::*`

References

https://www.us-cert.gov/ics/advisories/icsa-19-260-03
Source: [email protected]

Mitigation Third Party Advisory US Government Resource
https://www.us-cert.gov/ics/advisories/icsa-19-260-03
Source: af854a3a-2127-422b-91ae-364da2661108

Mitigation Third Party Advisory US Government Resource