What’s Vulnerable › Vulnerabilities

CVE-2021-3793

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-11-12 · updated 2026-06-17
• Weakness: CWE-424

Description

An improper access control vulnerability was reported in some Motorola-branded Binatone Hubble Cameras which could allow an unauthenticated attacker on the same network as the device to access administrative pages that could result in information disclosure or device firmware update with verified firmware.

Affected products

• Binatoneglobal Cn28 Firmware: all versions
• Binatoneglobal Cn40 Firmware: all versions
• Binatoneglobal Cn50 Firmware: all versions
• Binatoneglobal Cn75 Firmware: all versions
• Binatoneglobal Comfort 40 Firmware: all versions
• Binatoneglobal Comfort 50 Connect Firmware: all versions
• Binatoneglobal Comfort 85 Connect Firmware: before 03.40.02 — fixed in 03.40.02
• Binatoneglobal Connect 20 Firmware: all versions
• Binatoneglobal Connect View 65 Firmware: all versions
• Binatoneglobal Ease44 Firmware: all versions
• Binatoneglobal Focus 68 Firmware: all versions
• Binatoneglobal Focus 72R Firmware: before 03.40.00 — fixed in 03.40.00
• Binatoneglobal Halo+ Camera Firmware: before 03.50.14 — fixed in 03.50.14
• Binatoneglobal Lux 64 Firmware: all versions
• Binatoneglobal Lux 65 Firmware: all versions
• Binatoneglobal Lux 85 Connect Firmware: all versions
• Binatoneglobal Mbp3667 Firmware: all versions
• Binatoneglobal Mbp3855 Firmware: before 03.40.00 — fixed in 03.40.00
• Binatoneglobal Mbp4855 Firmware: all versions
• Binatoneglobal Mbp669 Connect Firmware: all versions
• Binatoneglobal Mbp6855 Firmware: all versions

How to fix

Upgrade to a fixed version: Binatoneglobal Comfort 85 Connect Firmware 03.40.02; Binatoneglobal Focus 72R Firmware 03.40.00; Binatoneglobal Halo+ Camera Firmware 03.50.14; Binatoneglobal Mbp3855 Firmware 03.40.00. Check the vendor advisory for mitigations.

References

• https://binatoneglobal.com/security-advisory/
• https://binatoneglobal.com/security-advisory/

Get alerted when CVE-2021-3793 or the next vulnerability affects your stack