{"id":"CVE-2019-13523","url":"https://www.cyber-defence.io/tools/cve/CVE-2019-13523","generatedAt":"2026-10-29T00:43:16.733Z","title":"In Honeywell Performance IP Cameras and Performance NVRs, the integrated web server of the affected devices could allow remote attackers to obtain web configuration data in JSON format for IP cameras and NVRs (Network Video Recorders), which can be…","description":"In Honeywell Performance IP Cameras and Performance NVRs, the integrated web server of the affected devices could allow remote attackers to obtain web configuration data in JSON format for IP cameras and NVRs (Network Video Recorders), which can be accessed without authentication over the network. Affected performance IP Cameras: HBD3PR2,H4D3PRV3,HED3PR3,H4D3PRV2,HBD3PR1,H4W8PR2,HBW8PR2,H2W2PC1M,H2W4PER3,H2W2PER3,HEW2PER3,HEW4PER3B,HBW2PER1,HEW4PER2,HEW4PER2B,HEW2PER2,H4W2PER2,HBW2PER2,H4W2PER3, and HPW2P1. Affected Performance Series NVRs: HEN08104,HEN08144,HEN081124,HEN16104,HEN16144,HEN16184,HEN16204,HEN162244,HEN16284,HEN16304,HEN16384,HEN32104,HEN321124,HEN32204,HEN32284,HEN322164,HEN32304, HEN32384,HEN323164,HEN64204,HEN64304,HEN643164,HEN643324,HEN643484,HEN04103,HEN04113,HEN04123,HEN08103,HEN08113,HEN08123,HEN08143,HEN16103,HEN16123,HEN16143,HEN16163,HEN04103L,HEN08103L,HEN16103L,HEN32103L.","published":"2019-09-26T16:15:11.000Z","lastModified":"2026-06-17T02:16:54.000Z","status":"Modified","sourceIdentifier":"ics-cert@hq.dhs.gov","cvss":{"version":"3.1","score":5.3,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},"cwe":["CWE-200","CWE-306"],"affected":["honeywell/hbd3pr2 firmware","honeywell/h4d3prv3 firmware","honeywell/hed3pr3 firmware","honeywell/h4d3prv2 firmware","honeywell/hbd3pr1 firmware","honeywell/h4w8pr2 firmware","honeywell/hbw8pr2 firmware","honeywell/h2w2pc1m firmware","honeywell/h2w4per3 firmware","honeywell/h2w2per3 firmware","honeywell/hew2per3 firmware","honeywell/hew4per3b firmware","honeywell/hbw2per1 firmware","honeywell/hew4per2 firmware","honeywell/hew4per2b firmware","honeywell/hew2per2 firmware","honeywell/h4w2per2 firmware","honeywell/hbw2per2 firmware","honeywell/h4w2per3 firmware","honeywell/hpw2p1 firmware","honeywell/hen08104 firmware","honeywell/hen08144 firmware","honeywell/hen081124 firmware","honeywell/hen16104 firmware","honeywell/hen16144 firmware","honeywell/hen16184 firmware","honeywell/hen16204 firmware","honeywell/hen162244 firmware","honeywell/hen16284 firmware","honeywell/hen16304 firmware","honeywell/hen16384 firmware","honeywell/hen32104 firmware","honeywell/hen321124 firmware","honeywell/hen32204 firmware","honeywell/hen32284 firmware","honeywell/hen322164 firmware","honeywell/hen32304 firmware","honeywell/hen32384 firmware","honeywell/hen323164 firmware","honeywell/hen64204 firmware","honeywell/hen64304 firmware","honeywell/hen643164 firmware","honeywell/hen643324 firmware","honeywell/hen643484 firmware","honeywell/hen04103 firmware","honeywell/hen04113 firmware","honeywell/hen04123 firmware","honeywell/hen08103 firmware","honeywell/hen08113 firmware","honeywell/hen08123 firmware","honeywell/hen08143 firmware","honeywell/hen16103 firmware","honeywell/hen16123 firmware","honeywell/hen16143 firmware","honeywell/hen16163 firmware","honeywell/hen04103l firmware","honeywell/hen08103l firmware","honeywell/hen16103l firmware","honeywell/hen32103l firmware"],"epss":{"score":0.0183,"percentile":0.7875,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (1.83%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://www.us-cert.gov/ics/advisories/icsa-19-260-03","tags":["Mitigation","Third Party Advisory","US Government Resource"],"source":"ics-cert@hq.dhs.gov"},{"url":"https://www.us-cert.gov/ics/advisories/icsa-19-260-03","tags":["Mitigation","Third Party Advisory","US Government Resource"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2019-13523","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}