Lucene search

[email protected]CVE-2021-3787

HistoryNov 12, 2021 - 10:15 p.m.

CVE-2021-3787

2021-11-1222:15:08

CWE-256

[email protected]

web.nvd.nist.gov

vulnerability

motorola

binatone

hubble cameras

unauthorized access

mqtt credentials

nvd

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.1 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

A vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow an attacker with local access to obtain the MQTT credentials that could result in unauthorized access to backend Hubble services.

Affected configurations

NVD

Node

binatoneglobalhalo\+_camera_firmwareRange<03.50.14

AND

binatoneglobalhalo\+_cameraMatch-

Node

binatoneglobalcomfort_85_connect_firmwareRange<03.40.02

AND

binatoneglobalcomfort_85_connectMatch-

Node

binatoneglobalmbp3855_firmwareRange<03.40.00

AND

binatoneglobalmbp3855Match-

Node

binatoneglobalfocus_68_firmwareMatch-

AND

binatoneglobalfocus_68Matchv100

Node

binatoneglobalfocus_68_firmwareMatch-

AND

binatoneglobalfocus_68Matchv200

Node

binatoneglobalfocus_72r_firmwareRange<03.40.00

AND

binatoneglobalfocus_72rMatchv100

Node

binatoneglobalfocus_72r_firmwareRange<03.40.00

AND

binatoneglobalfocus_72rMatchv200

Node

binatoneglobalcn28_firmwareMatch-

AND

binatoneglobalcn28Match-

Node

binatoneglobalcn50_firmwareMatch-

AND

binatoneglobalcn50Match-

Node

binatoneglobalcomfort_40_firmwareMatch-

AND

binatoneglobalcomfort_40Match-

Node

binatoneglobalcomfort_50_connect_firmwareMatch-

AND

binatoneglobalcomfort_50_connectMatch-

Node

binatoneglobalmbp4855_firmwareMatch-

AND

binatoneglobalmbp4855Match-

Node

binatoneglobalmbp3667_firmwareMatch-

AND

binatoneglobalmbp3667Match-

Node

binatoneglobalmbp669_connect_firmwareMatch-

AND

binatoneglobalmbp669_connectMatch-

Node

binatonegloballux_64_firmwareMatch-

AND

binatonegloballux_64Match-

Node

binatonegloballux_65_firmwareMatch-

AND

binatonegloballux_65Match-

Node

binatoneglobalconnect_view_65_firmwareMatch-

AND

binatoneglobalconnect_view_65Match-

Node

binatonegloballux_85_connect_firmwareMatch-

AND

binatonegloballux_85_connectMatch-

Node

binatoneglobalease44_firmwareMatch-

AND

binatoneglobalease44Match-

Node

binatoneglobalconnect_20_firmwareMatch-

AND

binatoneglobalconnect_20Match-

Node

binatoneglobalmbp6855_firmwareMatch-

AND

binatoneglobalmbp6855Match-

Node

binatoneglobalcn40_firmwareMatch-

AND

binatoneglobalcn40Match-

Node

binatoneglobalcn75_firmwareMatch-

AND

binatoneglobalcn75Match-

CPENameOperatorVersion
binatoneglobal:halo\+_camera_firmwarebinatoneglobal halo+ camera firmwarelt03.50.14

CPE	Name	Operator	Version
binatoneglobal:halo\+_camera_firmware	binatoneglobal halo+ camera firmware	lt	03.50.14

CNA Affected

[
  {
    "product": "Binatone Hubble Cameras",
    "vendor": "Motorola",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  }
]

References

binatoneglobal.com/security-advisory/

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.1 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2021-3787

cvelist1 nvd1 prion1