description: In Honeywell Performance IP Cameras and Performance NVRs, the integrated web server of the affected devices could allow remote attackers to obtain web configuration data in JSON format for IP cameras and NVRs (Network Video Recorders), which can be accessed without authentication over the network. Affected performance IP Cameras: HBD3PR2,H4D3PRV3,HED3PR3,H4D3PRV2,HBD3PR1,H4W8PR2,HBW8PR2,H2W2PC1M,H2W4PER3,H2W2PER3,HEW2PER3,HEW4PER3B,HBW2PER1,HEW4PER2,HEW4PER2B,HEW2PER2,H4W2PER2,HBW2PER2,H4W2PER3, and HPW2P1. Affected Performance Series NVRs: HEN08104,HEN08144,HEN081124,HEN16104,HEN16144,HEN16184,HEN16204,HEN162244,HEN16284,HEN16304,HEN16384,HEN32104,HEN321124,HEN32204,HEN32284,HEN322164,HEN32304, HEN32384,HEN323164,HEN64204,HEN64304,HEN643164,HEN643324,HEN643484,HEN04103,HEN04113,HEN04123,HEN08103,HEN08113,HEN08123,HEN08143,HEN16103,HEN16123,HEN16143,HEN16163,HEN04103L,HEN08103L,HEN16103L,HEN32103L.
problem types: INFORMATION EXPOSURE CWE-200
affected:
{
product: Performance IP Cameras
vendor: Honeywell
versions:
status: affected, version: HBD3PR2
status: affected, version: H4D3PRV3
status: affected, version: HED3PR3
status: affected, version: H4D3PRV2
status: affected, version: HBD3PR1
status: affected, version: H4W8PR2
status: affected, version: HBW8PR2
status: affected, version: H2W2PC1M
status: affected, version: H2W4PER3
status: affected, version: H2W2PER3
status: affected, version: HEW2PER3
status: affected, version: HEW4PER3B
status: affected, version: HBW2PER1
status: affected, version: HEW4PER2
status: affected, version: HEW4PER2B
status: affected, version: HEW2PER2
status: affected, version: H4W2PER2
status: affected, version: HBW2PER2
status: affected, version: H4W2PER3
status: affected, version: HPW2P1
}
{
product: Performance NVRs
vendor: Honeywell
versions:
status: affected, version: HEN08104
status: affected, version: HEN08144
status: affected, version: HEN081124
status: affected, version: HEN16104
status: affected, version: HEN16144
status: affected, version: HEN16184
status: affected, version: HEN16204
status: affected, version: HEN162244
status: affected, version: HEN16284
status: affected, version: HEN16304
status: affected, version: HEN16384
status: affected, version: HEN32104
status: affected, version: HEN321124
status: affected, version: HEN32204
status: affected, version: HEN32284
status: affected, version: HEN322164
status: affected, version: HEN32304
status: affected, version: HEN32384
status: affected, version: HEN323164
status: affected, version: HEN64204
status: affected, version: HEN64304
status: affected, version: HEN643164
status: affected, version: HEN643324
status: affected, version: HEN643484
status: affected, version: HEN04103
status: affected, version: HEN04113
status: affected, version: HEN04123
status: affected, version: HEN08103
status: affected, version: HEN08113
status: affected, version: HEN08123
status: affected, version: HEN08143
status: affected, version: HEN16103
status: affected, version: HEN16123
status: affected, version: HEN16143
status: affected, version: HEN16163
status: affected, version: HEN04103L
status: affected, version: HEN08103L
status: affected, version: HEN16103L
status: affected, version: HEN32103L
}
