多款Honeywell产品信息泄露漏洞


基本信息

时间: 2019-09-19

风险等级: 中

CNVD: CNVD-2019-31998

原地址: https://www.cnvd.org.cn/flaw/show/CNVD-2019-31998


描述
HoneywellPerformanceHBD3PR2等都是美国霍尼韦尔(Honeywell)公司的产品。HoneywellPerformanceHBD3PR2是一款IP摄像机。HoneywellPerformanceH4D3PRV3是一款IP摄像机。HoneywellPerformanceHEN08104是一款网络视频录像机(NVR)设备。多款Honeywell产品信息泄露漏洞,攻击者可利用该漏洞查看设备配置信息。
产品
HoneywellPerformanceIPSeriescamerasHBD3PR2HoneywellPerformanceIPSeriescamerasH4D3PRV3HoneywellPerformanceIPSeriescamerasHED3PR3HoneywellPerformanceIPSeriescamerasH4D3PRV2HoneywellPerformanceIPSeriescamerasHBD3PR1HoneywellPerformanceIPSeriescamerasH4W8PR2HoneywellPerformanceIPSeriescamerasHBW8PR2HoneywellPerformanceIPSeriescamerasH2W2PC1MHoneywellPerformanceIPSeriescamerasH2W4PER3HoneywellPerformanceIPSeriescamerasH2W2PER3HoneywellPerformanceIPSeriescamerasHEW2PER3HoneywellPerformanceIPSeriescamerasHEW4PER3BHoneywellPerformanceIPSeriescamerasHBW2PER1HoneywellPerformanceIPSeriescamerasHEW4PER2HoneywellPerformanceIPSeriescamerasHEW4PER2BHoneywellPerformanceIPSeriescamerasHEW2PER2HoneywellPerformanceIPSeriescamerasH4W2PER2HoneywellPerformanceIPSeriescamerasHBW2PER2HoneywellPerformanceIPSeriescamerasH4W2PER3HoneywellPerformanceIPSeriescamerasHPW2P1HoneywellPerformanceSeriesNVRsHEN08104HoneywellPerformanceSeriesNVRsHEN08144HoneywellPerformanceSeriesNVRsHEN081124HoneywellPerformanceSeriesNVRsHEN16104HoneywellPerformanceSeriesNVRsHEN16144HoneywellPerformanceSeriesNVRsHEN16184HoneywellPerformanceSeriesNVRsHEN16204HoneywellPerformanceSeriesNVRsHEN162244HoneywellPerformanceSeriesNVRsHEN16284HoneywellPerformanceSeriesNVRsHEN16304HoneywellPerformanceSeriesNVRsHEN16384HoneywellPerformanceSeriesNVRsHEN32104HoneywellPerformanceSeriesNVRsHEN321124HoneywellPerformanceSeriesNVRsHEN32204HoneywellPerformanceSeriesNVRsHEN32284HoneywellPerformanceSeriesNVRsHEN322164HoneywellPerformanceSeriesNVRsHEN32304HoneywellPerformanceSeriesNVRsHEN32384HoneywellPerformanceSeriesNVRsHEN323164HoneywellPerformanceSeriesNVRsHEN64204HoneywellPerformanceSeriesNVRsHEN64304HoneywellPerformanceSeriesNVRsHEN643
解决方案
厂商已发布了漏洞修复程序,请及时关注更新:https://www.honeywell.com
CVE
CVE-2019-13523
补丁
多款Honeywell产品信息泄露漏洞的补丁
来源
https://www.us-cert.gov/ics/advisories/icsa-19-260-03