CVE-2021-3577

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 60.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2021-11-12 · updated 2026-06-17
Weakness: CWE-78

Description

An unauthenticated remote code execution vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow an attacker on the same network unauthorized access to the device.

Affected products

Binatoneglobal Cn28 Firmware: all versions
Binatoneglobal Cn40 Firmware: all versions
Binatoneglobal Cn50 Firmware: all versions
Binatoneglobal Cn75 Firmware: all versions
Binatoneglobal Comfort 40 Firmware: all versions
Binatoneglobal Comfort 50 Connect Firmware: all versions
Binatoneglobal Comfort 85 Connect Firmware: before 03.40.02 — fixed in 03.40.02
Binatoneglobal Connect 20 Firmware: all versions
Binatoneglobal Connect View 65 Firmware: all versions
Binatoneglobal Ease44 Firmware: all versions
Binatoneglobal Focus 68 Firmware: all versions
Binatoneglobal Focus 72R Firmware: before 03.40.00 — fixed in 03.40.00
Binatoneglobal Halo+ Camera Firmware: before 03.50.14 — fixed in 03.50.14
Binatoneglobal Lux 64 Firmware: all versions
Binatoneglobal Lux 65 Firmware: all versions
Binatoneglobal Lux 85 Connect Firmware: all versions
Binatoneglobal Mbp3667 Firmware: all versions
Binatoneglobal Mbp3855 Firmware: before 03.40.00 — fixed in 03.40.00
Binatoneglobal Mbp4855 Firmware: all versions
Binatoneglobal Mbp669 Connect Firmware: all versions
Binatoneglobal Mbp6855 Firmware: all versions

How to fix

Upgrade to a fixed version: Binatoneglobal Comfort 85 Connect Firmware 03.40.02; Binatoneglobal Focus 72R Firmware 03.40.00; Binatoneglobal Halo+ Camera Firmware 03.50.14; Binatoneglobal Mbp3855 Firmware 03.40.00. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2021-3577 or the next vulnerability affects your stack