CVE-2021-3789

Severity: medium (CVSS 4.6 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-11-12 · updated 2026-06-17
Weakness: CWE-522

Description

An information disclosure vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow an attacker with physical access to obtain the encryption key used to decrypt firmware update packages.

Affected products

Binatoneglobal Cn28 Firmware: all versions
Binatoneglobal Cn40 Firmware: all versions
Binatoneglobal Cn50 Firmware: all versions
Binatoneglobal Cn75 Firmware: all versions
Binatoneglobal Comfort 40 Firmware: all versions
Binatoneglobal Comfort 50 Connect Firmware: all versions
Binatoneglobal Comfort 85 Connect Firmware: before 03.40.02 — fixed in 03.40.02
Binatoneglobal Connect 20 Firmware: all versions
Binatoneglobal Connect View 65 Firmware: all versions
Binatoneglobal Ease44 Firmware: all versions
Binatoneglobal Focus 68 Firmware: all versions
Binatoneglobal Focus 72R Firmware: before 03.40.00 — fixed in 03.40.00
Binatoneglobal Halo+ Camera Firmware: before 03.50.14 — fixed in 03.50.14
Binatoneglobal Lux 64 Firmware: all versions
Binatoneglobal Lux 65 Firmware: all versions
Binatoneglobal Lux 85 Connect Firmware: all versions
Binatoneglobal Mbp3667 Firmware: all versions
Binatoneglobal Mbp3855 Firmware: before 03.40.00 — fixed in 03.40.00
Binatoneglobal Mbp4855 Firmware: all versions
Binatoneglobal Mbp669 Connect Firmware: all versions
Binatoneglobal Mbp6855 Firmware: all versions

How to fix

Upgrade to a fixed version: Binatoneglobal Comfort 85 Connect Firmware 03.40.02; Binatoneglobal Focus 72R Firmware 03.40.00; Binatoneglobal Halo+ Camera Firmware 03.50.14; Binatoneglobal Mbp3855 Firmware 03.40.00. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2021-3789 or the next vulnerability affects your stack