CVE-2019-18226

CVE-2019-18226 is a critical-severity vulnerability in Honeywell H2w2pc1m Firmware with a CVSS 3.x base score of 9.8. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-294.

Key facts

• Severity: Critical (CVSS 3.x base score 9.8)
• CVSS v2: 7.5
• EPSS exploit prediction: 1% (69th percentile)
• Actively exploited: Not listed in CISA KEV
• Weakness: CWE-294
• Affected product: Honeywell H2w2pc1m Firmware
• Published: 2019-10-31
• Last modified: 2026-06-17

Description

Honeywell equIP series and Performance series IP cameras and recorders, A vulnerability exists in the affected products where IP cameras and recorders have a potential replay attack vulnerability as a weak authentication method is retained for compatibility with legacy products.

Frequently asked questions

What is CVE-2019-18226?

Honeywell equIP series and Performance series IP cameras and recorders, A vulnerability exists in the affected products where IP cameras and recorders have a potential replay attack vulnerability as a weak authentication method is retained for compatibility with legacy products.

How severe is CVE-2019-18226?

CVE-2019-18226 has a CVSS 3.x base score of 9.8, rated critical severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is high, integrity high, and availability high.

Is CVE-2019-18226 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (69th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2019-18226?

CVE-2019-18226 primarily affects Honeywell H2w2pc1m Firmware. In total, 64 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2019-18226?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.

When was CVE-2019-18226 published?

CVE-2019-18226 was published on 2019-10-31 and last updated on 2026-06-17.

References

• https://www.us-cert.gov/ics/advisories/icsa-19-304-04

Affected products (64)

• cpe:2.3:o:honeywell:h2w2pc1m_firmware:-:*:*:*:*:*:*:*
• cpe:2.3:o:honeywell:h2w2per3_firmware:-:*:*:*:*:*:*:*
• cpe:2.3:o:honeywell:h2w4per3_firmware:-:*:*:*:*:*:*:*
• cpe:2.3:o:honeywell:h4w2per2_firmware:-:*:*:*:*:*:*:*
• cpe:2.3:o:honeywell:h4w2per3_firmware:-:*:*:*:*:*:*:*
• cpe:2.3:o:honeywell:h4w4per2_firmware:-:*:*:*:*:*:*:*
• cpe:2.3:o:honeywell:h4w4per3_firmware:-:*:*:*:*:*:*:*
• cpe:2.3:o:honeywell:h4w8pr2_firmware:-:*:*:*:*:*:*:*
• cpe:2.3:o:honeywell:hbd2per1_firmware:-:*:*:*:*:*:*:*
• cpe:2.3:o:honeywell:hbw2per1_firmware:-:*:*:*:*:*:*:*
• cpe:2.3:o:honeywell:hbw2per2_firmware:-:*:*:*:*:*:*:*
• cpe:2.3:o:honeywell:hbw4per1_firmware:-:*:*:*:*:*:*:*
• cpe:2.3:o:honeywell:hbw4per2_firmware:-:*:*:*:*:*:*:*
• cpe:2.3:o:honeywell:hbw4pgr1_firmware:-:*:*:*:*:*:*:*
• cpe:2.3:o:honeywell:hbw8pr2_firmware:-:*:*:*:*:*:*:*
• cpe:2.3:o:honeywell:hed2per3_firmware:-:*:*:*:*:*:*:*
• cpe:2.3:o:honeywell:hew2per2_firmware:-:*:*:*:*:*:*:*
• cpe:2.3:o:honeywell:hew2per3_firmware:-:*:*:*:*:*:*:*
• cpe:2.3:o:honeywell:hew4per2b_firmware:-:*:*:*:*:*:*:*
• cpe:2.3:o:honeywell:hew4per3_firmware:-:*:*:*:*:*:*:*
• cpe:2.3:o:honeywell:hew4per3b_firmware:-:*:*:*:*:*:*:*
• cpe:2.3:o:honeywell:hdzp252di_firmware:-:*:*:*:*:*:*:*
• cpe:2.3:o:honeywell:hdzp304di_firmware:-:*:*:*:*:*:*:*
• cpe:2.3:o:honeywell:hpw2p1_firmware:-:*:*:*:*:*:*:*
• cpe:2.3:o:honeywell:h2w2gr1_firmware:-:*:*:*:*:*:*:*
• cpe:2.3:o:honeywell:h3w2gr1v_firmware:-:*:*:*:*:*:*:*
• cpe:2.3:o:honeywell:h3w4gr1v_firmware:-:*:*:*:*:*:*:*
• cpe:2.3:o:honeywell:h3w2gr1_firmware:-:*:*:*:*:*:*:*
• cpe:2.3:o:honeywell:h3w2gr2_firmware:-:*:*:*:*:*:*:*
• cpe:2.3:o:honeywell:h3w4gr1_firmware:-:*:*:*:*:*:*:*
• cpe:2.3:o:honeywell:h4l2gr1v_firmware:-:*:*:*:*:*:*:*
• cpe:2.3:o:honeywell:h4w2gr1_firmware:-:*:*:*:*:*:*:*
• cpe:2.3:o:honeywell:h4w2gr1v_firmware:-:*:*:*:*:*:*:*
• cpe:2.3:o:honeywell:h4w4gr1v_firmware:-:*:*:*:*:*:*:*
• cpe:2.3:o:honeywell:h4l2gr1_firmware:-:*:*:*:*:*:*:*
• cpe:2.3:o:honeywell:h4w2gr2_firmware:-:*:*:*:*:*:*:*
• cpe:2.3:o:honeywell:h4w4gr1_firmware:-:*:*:*:*:*:*:*
• cpe:2.3:o:honeywell:h4l6gr2_firmware:-:*:*:*:*:*:*:*
• cpe:2.3:o:honeywell:hm4l8gr1_firmware:-:*:*:*:*:*:*:*
• cpe:2.3:o:honeywell:h4d8gr1_firmware:-:*:*:*:*:*:*:*

More vulnerabilities in Honeywell H2w2pc1m Firmware

• CVE-2019-18228 — High (CVSS 7.5): Honeywell equIP series IP cameras Multiple equIP Series Cameras, A vulnerability exists in the affected products where…
• CVE-2019-13523 — Medium (CVSS 5.3): In Honeywell Performance IP Cameras and Performance NVRs, the integrated web server of the affected devices could allow…

All CVEs affecting Honeywell H2w2pc1m Firmware →

Other CWE-294 (Authentication Bypass by Capture-replay) vulnerabilities

• CVE-2025-49752 — Critical (CVSS 10.0): Azure Bastion Elevation of Privilege Vulnerability
• CVE-2026-11856 — Critical (CVSS 9.8): Successfully using libcurl to do a transfer to a specific HTTP origin (`hostA`) with **Digest** authentication and then…
• CVE-2026-32987 — Critical (CVSS 9.8): OpenClaw before 2026.3.13 allows bootstrap setup codes to be replayed during device pairing verification in…
• CVE-2025-67135 — Critical (CVSS 9.8): Weak Security in the PF-50 1.2 keyfob of PGST PG107 Alarm System 1.25.05.hf allows attackers to compromise access…
• CVE-2025-65552 — Critical (CVSS 9.8): D3D Wi-Fi Home Security System ZX-G12 v2.1.1 is vulnerable to RF replay attacks on the 433 MHz sensor communication…
• CVE-2024-38438 — Critical (CVSS 9.8): D-Link - CWE-294: Authentication Bypass by Capture-replay

Browse all CWE-294 (Authentication Bypass by Capture-replay) vulnerabilities →