CVEvulnerability
CVE-2021-3791
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2021-11-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 3.3 LOW — AV:A/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-532
Description
An information disclosure vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow an unauthenticated attacker on the same subnet to download an encrypted log file containing sensitive information such as WiFi SSID and password.
Affected configurations
• binatoneglobal halo\+ camera firmware (< 03.50.14)
• binatoneglobal comfort 85 connect firmware (< 03.40.02)
• binatoneglobal mbp3855 firmware (< 03.40.00)
• binatoneglobal focus 68 firmware
• binatoneglobal focus 72r firmware (< 03.40.00)
• binatoneglobal cn28 firmware
• binatoneglobal cn50 firmware
• binatoneglobal comfort 40 firmware
• binatoneglobal comfort 50 connect firmware
• binatoneglobal mbp4855 firmware
• binatoneglobal mbp3667 firmware
• binatoneglobal mbp669 connect firmware
• binatoneglobal lux 64 firmware
• binatoneglobal lux 65 firmware
• binatoneglobal connect view 65 firmware
• binatoneglobal lux 85 connect firmware
• binatoneglobal ease44 firmware
• binatoneglobal connect 20 firmware
• binatoneglobal mbp6855 firmware
• binatoneglobal cn40 firmware
• binatoneglobal cn75 firmware
Related
Weakness · CWE (1)
- CWE-532 Insertion of Sensitive Information into Log File weakness
References
- https://binatoneglobal.com/security-advisory/ Vendor Advisory
- https://binatoneglobal.com/security-advisory/ Vendor Advisory