Medium severity · published Nov 12, 2021
CVE-2021-3793
An improper access control vulnerability was reported in some Motorola-branded Binatone Hubble Cameras which could allow an unauthenticated attacker on the same network as the…
5.3
CVSS
0.7%
EPSS
No
On KEV
Description
An improper access control vulnerability was reported in some Motorola-branded Binatone Hubble Cameras which could allow an unauthenticated attacker on the same network as the device to access administrative pages that could result in information disclosure or device firmware update with verified firmware.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 53% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CF
Cn28 Firmware · Binatoneglobal
All versions, or not specified · source: NVD
CF
Cn40 Firmware · Binatoneglobal
All versions, or not specified · source: NVD
CF
Cn50 Firmware · Binatoneglobal
All versions, or not specified · source: NVD
CF
Cn75 Firmware · Binatoneglobal
All versions, or not specified · source: NVD
C4
Comfort 40 Firmware · Binatoneglobal
All versions, or not specified · source: NVD
C5
Comfort 50 Connect Firmware · Binatoneglobal
All versions, or not specified · source: NVD
C8
Comfort 85 Connect Firmware · Binatoneglobal
before 03.40.02 · source: NVD
C2
Connect 20 Firmware · Binatoneglobal
All versions, or not specified · source: NVD
CV
Connect View 65 Firmware · Binatoneglobal
All versions, or not specified · source: NVD
EF
Ease44 Firmware · Binatoneglobal
All versions, or not specified · source: NVD
F6
Focus 68 Firmware · Binatoneglobal
All versions, or not specified · source: NVD
F7
Focus 72r Firmware · Binatoneglobal
before 03.40.00; before 03.40.00 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-3793
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-3793
Vendor Advisory
https://binatoneglobal.com/security-advisory/
More from Cn28 Firmware
8.8
CVE-2021-3577
An unauthenticated remote code execution vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow an attacker on the same network unauthorized…
7.8
CVE-2021-3787
A vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow an attacker with local access to obtain the MQTT credentials that could result in…
6.8
CVE-2021-3788
An exposed debug interface was reported in some Motorola-branded Binatone Hubble Cameras that could allow an attacker with physical access unauthorized access to the device
6.5
CVE-2021-3791
An information disclosure vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow an unauthenticated attacker on the same subnet to download…
6.5
CVE-2021-3790
A buffer overflow was reported in the local web server of some Motorola-branded Binatone Hubble Cameras that could allow an unauthenticated attacker on the same network to perform…