Description
The affected products are vulnerable to an unauthenticated API endpoint exposure, which may allow an attacker to remotely change the "forgot password" recovery email address.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Honeywell | I-HIB2PI-UL 2MP IP | 6.1.22.1216 | — |
| Honeywell | SMB NDAA MVO-3 | WDR_2MP_32M_PTZ_v2.0 | — |
| Honeywell | PTZ WDR 2MP 32M | WDR_2MP_32M_PTZ_v2.0 | — |
| Honeywell | 25M IPC | WDR_2MP_32M_PTZ_v2.0 | — |
Advisories 1
- ICSA-26-048-04 Honeywell HIB2PI CCTV Camera (Update B) CISA ICS & IT advisories · Mar 12, 2026