CVE-2019-13523 MEDIUM

Published: 2019-09-26 | Last Modified: 2026-06-17 | Status: Modified

Description

In Honeywell Performance IP Cameras and Performance NVRs, the integrated web server of the affected devices could allow remote attackers to obtain web configuration data in JSON format for IP cameras and NVRs (Network Video Recorders), which can be accessed without authentication over the network. Affected performance IP Cameras: HBD3PR2,H4D3PRV3,HED3PR3,H4D3PRV2,HBD3PR1,H4W8PR2,HBW8PR2,H2W2PC1M,H2W4PER3,H2W2PER3,HEW2PER3,HEW4PER3B,HBW2PER1,HEW4PER2,HEW4PER2B,HEW2PER2,H4W2PER2,HBW2PER2,H4W2PER3, and HPW2P1. Affected Performance Series NVRs: HEN08104,HEN08144,HEN081124,HEN16104,HEN16144,HEN16184,HEN16204,HEN162244,HEN16284,HEN16304,HEN16384,HEN32104,HEN321124,HEN32204,HEN32284,HEN322164,HEN32304, HEN32384,HEN323164,HEN64204,HEN64304,HEN643164,HEN643324,HEN643484,HEN04103,HEN04113,HEN04123,HEN08103,HEN08113,HEN08123,HEN08143,HEN16103,HEN16123,HEN16143,HEN16163,HEN04103L,HEN08103L,HEN16103L,HEN32103L.

Additional Descriptions (1)

En las cámaras IP y NVRs Honeywell Performance, el servidor web integrado de los dispositivos afectados podría permitir a atacantes remotos obtener datos de configuración web en formato JSON para cámaras IP y NVR (Network Video Recorders), que pueden ser accedidos sin autenticación a través de la red. Cámaras IP Performance afectadas: HBD3PR2, H4D3PRV3, HED3PR3, H4D3PRV2, HBD3PR1, H4W8PR2, HBW8PR2, H2W2PC1M, H2W4PER3, H2W2PER3, HEW2PER3, HEW4PER3B, HBW2PER1, HEW4PER2, HEW4PER2B, HEW2PER2, H4W2PER2, HBW2PER2, H4W2PER3, y HPW2P1. NVRs Serie Performance afectados: HEN08104, HEN08144, HEN081124, HEN16104, HEN16144, HEN16184, HEN16204, HEN162244, HEN16284, HEN16304, HEN16384, HEN32104, HEN321124, HEN32204, HEN32284, HEN322164, HEN32304, HEN32384, HEN323164, HEN64204, HEN64304, HEN643164, HEN643324, HEN643484, HEN04103, HEN04113, HEN04123, HEN08103, HEN08113, HEN08123, HEN08143, HEN16103, HEN16123, HEN16143, HEN16163, HEN04103L, HEN08103L, HEN16103L, HEN32103L.

CVSS Metrics

Base Score: 5.3 (MEDIUM)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Attack Vector	NETWORK
Attack Complexity	LOW
Privileges Required	NONE
User Interaction	NONE
Scope	UNCHANGED
Confidentiality Impact	LOW
Integrity Impact	NONE
Availability Impact	NONE

Source: [email protected]

Type: Primary

Exploitability Score: 3.9

Impact Score: 1.4

Base Score: 5.0 (MEDIUM)

AV:N/AC:L/Au:N/C:P/I:N/A:N

Access Vector	NETWORK
Access Complexity	LOW
Authentication	NONE
Confidentiality Impact	PARTIAL
Integrity Impact	NONE
Availability Impact	NONE

Source: [email protected]

Type: Primary

Exploitability Score: 10.0

Impact Score: 2.9

Weaknesses

Source	Type	Description
[email protected]	Secondary	en CWE-200
[email protected]	Primary	en CWE-306

Affected Products

Vendor	Product	Version	Update	Type
honeywell	hbd3pr2_firmware	-	<built-in method update of dict object at 0x7763a1a3a140>	Operating System
honeywell	h4d3prv3_firmware	-	<built-in method update of dict object at 0x7763bb2c9ec0>	Operating System
honeywell	hed3pr3_firmware	-	<built-in method update of dict object at 0x7763bb2cab80>	Operating System
honeywell	h4d3prv2_firmware	-	<built-in method update of dict object at 0x7763f05c5d80>	Operating System
honeywell	hbd3pr1_firmware	-	<built-in method update of dict object at 0x7763a1a392c0>	Operating System
honeywell	h4w8pr2_firmware	-	<built-in method update of dict object at 0x7763a1a39b40>	Operating System
honeywell	hbw8pr2_firmware	-	<built-in method update of dict object at 0x7763bb2c9300>	Operating System
honeywell	h2w2pc1m_firmware	-	<built-in method update of dict object at 0x7763bb2c97c0>	Operating System
honeywell	h2w4per3_firmware	-	<built-in method update of dict object at 0x7763a0656b40>	Operating System
honeywell	h2w2per3_firmware	-	<built-in method update of dict object at 0x7763a1a3a840>	Operating System
honeywell	hew2per3_firmware	-	<built-in method update of dict object at 0x7763d8631600>	Operating System
honeywell	hew4per3b_firmware	-	<built-in method update of dict object at 0x7763a1a38480>	Operating System
honeywell	hbw2per1_firmware	-	<built-in method update of dict object at 0x7763d84a32c0>	Operating System
honeywell	hew4per2_firmware	-	<built-in method update of dict object at 0x7763d8710bc0>	Operating System
honeywell	hew4per2b_firmware	-	<built-in method update of dict object at 0x7763bb2cb6c0>	Operating System
honeywell	hew2per2_firmware	-	<built-in method update of dict object at 0x7763645f2dc0>	Operating System
honeywell	h4w2per2_firmware	-	<built-in method update of dict object at 0x7763bb2c8600>	Operating System
honeywell	hbw2per2_firmware	-	<built-in method update of dict object at 0x7763bb2caa80>	Operating System
honeywell	h4w2per3_firmware	-	<built-in method update of dict object at 0x7763b9f3b740>	Operating System
honeywell	hpw2p1_firmware	-	<built-in method update of dict object at 0x7763b9f3ab40>	Operating System
honeywell	hen08104_firmware	-	<built-in method update of dict object at 0x7763a11ebd00>	Operating System
honeywell	hen08144_firmware	-	<built-in method update of dict object at 0x7763d8970900>	Operating System
honeywell	hen081124_firmware	-	<built-in method update of dict object at 0x7763d8712e80>	Operating System
honeywell	hen16104_firmware	-	<built-in method update of dict object at 0x7763a1a3b9c0>	Operating System
honeywell	hen16144_firmware	-	<built-in method update of dict object at 0x7763d87106c0>	Operating System
honeywell	hen16184_firmware	-	<built-in method update of dict object at 0x7763bb2c8780>	Operating System
honeywell	hen16204_firmware	-	<built-in method update of dict object at 0x7763d8b8a040>	Operating System
honeywell	hen162244_firmware	-	<built-in method update of dict object at 0x7763d84a13c0>	Operating System
honeywell	hen16284_firmware	-	<built-in method update of dict object at 0x7763a1a3a880>	Operating System
honeywell	hen16304_firmware	-	<built-in method update of dict object at 0x7763d84a34c0>	Operating System
honeywell	hen16384_firmware	-	<built-in method update of dict object at 0x7763a11e8140>	Operating System
honeywell	hen32104_firmware	-	<built-in method update of dict object at 0x7763d84a2800>	Operating System
honeywell	hen321124_firmware	-	<built-in method update of dict object at 0x7763d84a24c0>	Operating System
honeywell	hen32204_firmware	-	<built-in method update of dict object at 0x7763d84a1d80>	Operating System
honeywell	hen32284_firmware	-	<built-in method update of dict object at 0x7763b9f3a7c0>	Operating System
honeywell	hen322164_firmware	-	<built-in method update of dict object at 0x7763d84a0fc0>	Operating System
honeywell	hen32304_firmware	-	<built-in method update of dict object at 0x7763d88418c0>	Operating System
honeywell	hen32384_firmware	-	<built-in method update of dict object at 0x7763d8841a40>	Operating System
honeywell	hen323164_firmware	-	<built-in method update of dict object at 0x7763a11e9180>	Operating System
honeywell	hen64204_firmware	-	<built-in method update of dict object at 0x7763a11ebb40>	Operating System
honeywell	hen64304_firmware	-	<built-in method update of dict object at 0x7763d84a1ec0>	Operating System
honeywell	hen643164_firmware	-	<built-in method update of dict object at 0x7763a11e8280>	Operating System
honeywell	hen643324_firmware	-	<built-in method update of dict object at 0x7763d84a0d40>	Operating System
honeywell	hen643484_firmware	-	<built-in method update of dict object at 0x7763d8842100>	Operating System
honeywell	hen04103_firmware	-	<built-in method update of dict object at 0x7763d88416c0>	Operating System
honeywell	hen04113_firmware	-	<built-in method update of dict object at 0x7763a11ea200>	Operating System
honeywell	hen04123_firmware	-	<built-in method update of dict object at 0x7763d84a2980>	Operating System
honeywell	hen08103_firmware	-	<built-in method update of dict object at 0x7763d84a2080>	Operating System
honeywell	hen08113_firmware	-	<built-in method update of dict object at 0x7763a2d508c0>	Operating System
honeywell	hen08123_firmware	-	<built-in method update of dict object at 0x7763a2d53c40>	Operating System
honeywell	hen08143_firmware	-	<built-in method update of dict object at 0x7763a2d507c0>	Operating System
honeywell	hen16103_firmware	-	<built-in method update of dict object at 0x7763a2d53680>	Operating System
honeywell	hen16123_firmware	-	<built-in method update of dict object at 0x7763a1feb1c0>	Operating System
honeywell	hen16143_firmware	-	<built-in method update of dict object at 0x7763a374c180>	Operating System
honeywell	hen16163_firmware	-	<built-in method update of dict object at 0x7763a1fe8e40>	Operating System
honeywell	hen04103l_firmware	-	<built-in method update of dict object at 0x7763a374e440>	Operating System
honeywell	hen08103l_firmware	-	<built-in method update of dict object at 0x7763a374c900>	Operating System
honeywell	hen16103l_firmware	-	<built-in method update of dict object at 0x7763a374ff00>	Operating System
honeywell	hen32103l_firmware	-	<built-in method update of dict object at 0x7763a374d7c0>	Operating System

Affected Configurations

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hbd3pr2_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hbd3pr2:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:h4d3prv3_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:h4d3prv3:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hed3pr3_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hed3pr3:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:h4d3prv2_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:h4d3prv2:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hbd3pr1_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hbd3pr1:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:h4w8pr2_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:h4w8pr2:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hbw8pr2_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hbw8pr2:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:h2w2pc1m_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:h2w2pc1m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:h2w4per3_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:h2w4per3:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:h2w2per3_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:h2w2per3:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hew2per3_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hew2per3:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hew4per3b_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hew4per3b:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hbw2per1_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hbw2per1:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hew4per2_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hew4per2:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hew4per2b_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hew4per2b:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hew2per2_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hew2per2:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:h4w2per2_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:h4w2per2:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hbw2per2_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hbw2per2:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:h4w2per3_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:h4w2per3:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hpw2p1_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hpw2p1:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen08104_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen08104:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen08144_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen08144:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen081124_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen081124:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen16104_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen16104:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen16144_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen16144:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen16184_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen16184:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen16204_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen16204:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen162244_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen162244:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen16284_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen16284:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen16304_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen16304:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen16384_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen16384:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen32104_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen32104:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen321124_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen321124:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen32204_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen32204:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen32284_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen32284:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen322164_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen322164:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen32304_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen32304:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen32384_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen32384:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen323164_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen323164:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen64204_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen64204:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen64304_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen64304:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen643164_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen643164:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen643324_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen643324:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen643484_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen643484:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen04103_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen04103:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen04113_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen04113:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen04123_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen04123:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen08103_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen08103:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen08113_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen08113:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen08123_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen08123:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen08143_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen08143:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen16103_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen16103:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen16123_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen16123:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen16143_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen16143:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen16163_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen16163:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen04103l_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen04103l:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen08103l_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen08103l:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen16103l_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen16103l:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:honeywell:hen32103l_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:honeywell:hen32103l:-:::::::*`

References

https://www.us-cert.gov/ics/advisories/icsa-19-260-03
Source: [email protected]

Mitigation Third Party Advisory US Government Resource
https://www.us-cert.gov/ics/advisories/icsa-19-260-03
Source: af854a3a-2127-422b-91ae-364da2661108

Mitigation Third Party Advisory US Government Resource