Medium severity · published Nov 12, 2021
CVE-2021-3789
An information disclosure vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow an attacker with physical access to obtain the encryption…
4.6
CVSS
0.1%
EPSS
No
On KEV
Description
An information disclosure vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow an attacker with physical access to obtain the encryption key used to decrypt firmware update packages.
CVSS vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Physical
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 0% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CF
Cn28 Firmware · Binatoneglobal
All versions, or not specified · source: NVD
CF
Cn40 Firmware · Binatoneglobal
All versions, or not specified · source: NVD
CF
Cn50 Firmware · Binatoneglobal
All versions, or not specified · source: NVD
CF
Cn75 Firmware · Binatoneglobal
All versions, or not specified · source: NVD
C4
Comfort 40 Firmware · Binatoneglobal
All versions, or not specified · source: NVD
C5
Comfort 50 Connect Firmware · Binatoneglobal
All versions, or not specified · source: NVD
C8
Comfort 85 Connect Firmware · Binatoneglobal
before 03.40.02 · source: NVD
C2
Connect 20 Firmware · Binatoneglobal
All versions, or not specified · source: NVD
CV
Connect View 65 Firmware · Binatoneglobal
All versions, or not specified · source: NVD
EF
Ease44 Firmware · Binatoneglobal
All versions, or not specified · source: NVD
F6
Focus 68 Firmware · Binatoneglobal
All versions, or not specified · source: NVD
F7
Focus 72r Firmware · Binatoneglobal
before 03.40.00; before 03.40.00 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-3789
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-3789
Vendor Advisory
https://binatoneglobal.com/security-advisory/
More from Cn28 Firmware
8.8
CVE-2021-3577
An unauthenticated remote code execution vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow an attacker on the same network unauthorized…
7.8
CVE-2021-3787
A vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow an attacker with local access to obtain the MQTT credentials that could result in…
6.8
CVE-2021-3788
An exposed debug interface was reported in some Motorola-branded Binatone Hubble Cameras that could allow an attacker with physical access unauthorized access to the device
6.5
CVE-2021-3791
An information disclosure vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow an unauthenticated attacker on the same subnet to download…
6.5
CVE-2021-3790
A buffer overflow was reported in the local web server of some Motorola-branded Binatone Hubble Cameras that could allow an unauthenticated attacker on the same network to perform…