CVEvulnerability
CVE-2021-3793
5.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2021-11-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
- CVSS 3.1 ([email protected])
- 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-424
Description
An improper access control vulnerability was reported in some Motorola-branded Binatone Hubble Cameras which could allow an unauthenticated attacker on the same network as the device to access administrative pages that could result in information disclosure or device firmware update with verified firmware.
Affected configurations
• binatoneglobal halo\+ camera firmware (< 03.50.14)
• binatoneglobal comfort 85 connect firmware (< 03.40.02)
• binatoneglobal mbp3855 firmware (< 03.40.00)
• binatoneglobal focus 68 firmware
• binatoneglobal focus 72r firmware (< 03.40.00)
• binatoneglobal cn28 firmware
• binatoneglobal cn50 firmware
• binatoneglobal comfort 40 firmware
• binatoneglobal comfort 50 connect firmware
• binatoneglobal mbp4855 firmware
• binatoneglobal mbp3667 firmware
• binatoneglobal mbp669 connect firmware
• binatoneglobal lux 64 firmware
• binatoneglobal lux 65 firmware
• binatoneglobal connect view 65 firmware
• binatoneglobal lux 85 connect firmware
• binatoneglobal ease44 firmware
• binatoneglobal connect 20 firmware
• binatoneglobal mbp6855 firmware
• binatoneglobal cn40 firmware
• binatoneglobal cn75 firmware
Related
Weakness · CWE (1)
- CWE-424 Improper Protection of Alternate Path weakness
References
- https://binatoneglobal.com/security-advisory/ Vendor Advisory
- https://binatoneglobal.com/security-advisory/ Vendor Advisory