CVE-2021-3791

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-11-12 · updated 2026-06-17
Weakness: CWE-532

Description

An information disclosure vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow an unauthenticated attacker on the same subnet to download an encrypted log file containing sensitive information such as WiFi SSID and password.

Affected products

Binatoneglobal Cn28 Firmware: all versions
Binatoneglobal Cn40 Firmware: all versions
Binatoneglobal Cn50 Firmware: all versions
Binatoneglobal Cn75 Firmware: all versions
Binatoneglobal Comfort 40 Firmware: all versions
Binatoneglobal Comfort 50 Connect Firmware: all versions
Binatoneglobal Comfort 85 Connect Firmware: before 03.40.02 — fixed in 03.40.02
Binatoneglobal Connect 20 Firmware: all versions
Binatoneglobal Connect View 65 Firmware: all versions
Binatoneglobal Ease44 Firmware: all versions
Binatoneglobal Focus 68 Firmware: all versions
Binatoneglobal Focus 72R Firmware: before 03.40.00 — fixed in 03.40.00
Binatoneglobal Halo+ Camera Firmware: before 03.50.14 — fixed in 03.50.14
Binatoneglobal Lux 64 Firmware: all versions
Binatoneglobal Lux 65 Firmware: all versions
Binatoneglobal Lux 85 Connect Firmware: all versions
Binatoneglobal Mbp3667 Firmware: all versions
Binatoneglobal Mbp3855 Firmware: before 03.40.00 — fixed in 03.40.00
Binatoneglobal Mbp4855 Firmware: all versions
Binatoneglobal Mbp669 Connect Firmware: all versions
Binatoneglobal Mbp6855 Firmware: all versions

How to fix

Upgrade to a fixed version: Binatoneglobal Comfort 85 Connect Firmware 03.40.02; Binatoneglobal Focus 72R Firmware 03.40.00; Binatoneglobal Halo+ Camera Firmware 03.50.14; Binatoneglobal Mbp3855 Firmware 03.40.00. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2021-3791 or the next vulnerability affects your stack