CVE-2021-3792

Severity: medium (CVSS 5.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-11-12 · updated 2026-06-17
Weakness: CWE-319

Description

Some device communications in some Motorola-branded Binatone Hubble Cameras with backend Hubble services are not encrypted which could lead to the communication channel being accessible by an attacker.

Affected products

Binatoneglobal Cn28 Firmware: all versions
Binatoneglobal Cn40 Firmware: all versions
Binatoneglobal Cn50 Firmware: all versions
Binatoneglobal Cn75 Firmware: all versions
Binatoneglobal Comfort 40 Firmware: all versions
Binatoneglobal Comfort 50 Connect Firmware: all versions
Binatoneglobal Comfort 85 Connect Firmware: before 03.40.02 — fixed in 03.40.02
Binatoneglobal Connect 20 Firmware: all versions
Binatoneglobal Connect View 65 Firmware: all versions
Binatoneglobal Ease44 Firmware: all versions
Binatoneglobal Focus 68 Firmware: all versions
Binatoneglobal Focus 72R Firmware: before 03.40.00 — fixed in 03.40.00
Binatoneglobal Halo+ Camera Firmware: before 03.50.14 — fixed in 03.50.14
Binatoneglobal Lux 64 Firmware: all versions
Binatoneglobal Lux 65 Firmware: all versions
Binatoneglobal Lux 85 Connect Firmware: all versions
Binatoneglobal Mbp3667 Firmware: all versions
Binatoneglobal Mbp3855 Firmware: before 03.40.00 — fixed in 03.40.00
Binatoneglobal Mbp4855 Firmware: all versions
Binatoneglobal Mbp669 Connect Firmware: all versions
Binatoneglobal Mbp6855 Firmware: all versions

How to fix

Upgrade to a fixed version: Binatoneglobal Comfort 85 Connect Firmware 03.40.02; Binatoneglobal Focus 72R Firmware 03.40.00; Binatoneglobal Halo+ Camera Firmware 03.50.14; Binatoneglobal Mbp3855 Firmware 03.40.00. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2021-3792 or the next vulnerability affects your stack