Honeywell equIP Series IP Cameras CVE-2019-18228 Denial of Service Vulnerability

2019-09-13T00:00:00
ID SMNTC-110683
Type symantec
Reporter Symantec Security Response
Modified 2019-09-13T00:00:00

Description

Description

Honeywell equIP Series IP Cameras is prone to a denial-of-service vulnerability. Remote attackers can exploit this issue to cause denial-of-service conditions.

Technologies Affected

  • Honeywell H3W2GR1
  • Honeywell H3W2GR2
  • Honeywell H3W4GR1
  • Honeywell H4L2GR1
  • Honeywell H4W2GR1
  • Honeywell H4W2GR2
  • Honeywell H4W4GR1
  • Honeywell HBL2GR1
  • Honeywell HBW2GR1
  • Honeywell HBW2GR3
  • Honeywell HBW4GR1
  • Honeywell HCL2G
  • Honeywell HCW2G
  • Honeywell HCW4G

Recommendations

Run all software as a nonprivileged user with minimal access rights.
To reduce the impact of latent vulnerabilities, always run nonadministrative software as an unprivileged user with minimal access rights.

Deploy network intrusion detection systems to monitor network traffic for malicious activity.
Deploy NIDS to monitor network traffic for signs of anomalous or suspicious activity. This may indicate exploit attempts or activity that results from successful exploits.

Updates are available. Please see the references or vendor advisory for more information.