Performance NVRs

HEN16103L

OTHER 1 CVE

HEN16163

OTHER 1 CVE

HEN16284

OTHER 1 CVE

HEN08104

OTHER 1 CVE

HEN32103L

OTHER 1 CVE

HEN16184

OTHER 1 CVE

HEN322164

OTHER 1 CVE

HEN64304

OTHER 1 CVE

HEN04123

OTHER 1 CVE

HEN04103

OTHER 1 CVE

HEN08103

OTHER 1 CVE

HEN32304

OTHER 1 CVE

HEN081124

OTHER 1 CVE

HEN16104

OTHER 1 CVE

HEN643164

OTHER 1 CVE

HEN16384

OTHER 1 CVE

HEN16103

OTHER 1 CVE

HEN32284

OTHER 1 CVE

HEN162244

OTHER 1 CVE

HEN16204

OTHER 1 CVE

HEN32104

OTHER 1 CVE

HEN08113

OTHER 1 CVE

HEN32204

OTHER 1 CVE

HEN04103L

OTHER 1 CVE

HEN08103L

OTHER 1 CVE

HEN32384

OTHER 1 CVE

HEN04113

OTHER 1 CVE

HEN64204

OTHER 1 CVE

HEN16123

OTHER 1 CVE

HEN323164

OTHER 1 CVE

HEN16143

OTHER 1 CVE

HEN16144

OTHER 1 CVE

HEN08143

OTHER 1 CVE

HEN08123

OTHER 1 CVE

HEN643484

OTHER 1 CVE

HEN643324

OTHER 1 CVE

HEN321124

OTHER 1 CVE

HEN08144

OTHER 1 CVE

HEN16304

OTHER 1 CVE

CVE-2019-13523

In Honeywell Performance IP Cameras and Performance NVRs, the integrated web server of the affected devices could allow remote attackers to obtain web configuration data in JSON format for IP cameras and NVRs (Network Video Recorders), which can be accessed without authentication over the network. Affected performance IP Cameras: HBD3PR2,H4D3PRV3,HED3PR3,H4D3PRV2,HBD3PR1,H4W8PR2,HBW8PR2,H2W2PC1M,H2W4PER3,H2W2PER3,HEW2PER3,HEW4PER3B,HBW2PER1,HEW4PER2,HEW4PER2B,HEW2PER2,H4W2PER2,HBW2PER2,H4W2PER3, and HPW2P1. Affected Performance Series NVRs: HEN08104,HEN08144,HEN081124,HEN16104,HEN16144,HEN16184,HEN16204,HEN162244,HEN16284,HEN16304,HEN16384,HEN32104,HEN321124,HEN32204,HEN32284,HEN322164,HEN32304, HEN32384,HEN323164,HEN64204,HEN64304,HEN643164,HEN643324,HEN643484,HEN04103,HEN04113,HEN04123,HEN08103,HEN08113,HEN08123,HEN08143,HEN16103,HEN16123,HEN16143,HEN16163,HEN04103L,HEN08103L,HEN16103L,HEN32103L.

UNKNOWN Sep 26, 2019