CVE-2021-39364

—

CVSS 3.1

7.5 high

EPSS

1%p62

Published

Feb 24, 2022 (Feb 24, 2022)

Modified

Jun 17, 2026

Description

Honeywell HDZP252DI 1.00.HW02.4 and HBW2PER1 1.000.HW01.3 devices allow command spoofing (for camera control) after ARP cache poisoning has been achieved.

Vendors: honeywell
Products: hdzp252di firmware, hbw2per1 firmware
Weakness: CWE-294
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (1.0%)

In the news0 stories

No ingested article mentions this CVE yet.