1. Home
  2. CVE Database
  3. CVE-2021-3789
MEDIUM · 4.2

CVE-2021-3789

An information disclosure vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow an attacker with physical access to obtain the encryption key used to decrypt fir...

Vulnerability Description

An information disclosure vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow an attacker with physical access to obtain the encryption key used to decrypt firmware update packages.

CVSS Score

4.2

MEDIUM

CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
PHYSICAL
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
BinatoneglobalHalo\+ Camera Firmware< 03.50.14
BinatoneglobalHalo\+ Camera-
BinatoneglobalComfort 85 Connect Firmware< 03.40.02
BinatoneglobalComfort 85 Connect-
BinatoneglobalMbp3855 Firmware< 03.40.00
BinatoneglobalMbp3855-
BinatoneglobalFocus 68 Firmware-
BinatoneglobalFocus 68v100
BinatoneglobalFocus 72R Firmware< 03.40.00
BinatoneglobalFocus 72Rv100
BinatoneglobalCn28 Firmware-
BinatoneglobalCn28-
BinatoneglobalCn50 Firmware-
BinatoneglobalCn50-
BinatoneglobalComfort 40 Firmware-
BinatoneglobalComfort 40-
BinatoneglobalComfort 50 Connect Firmware-
BinatoneglobalComfort 50 Connect-
BinatoneglobalMbp4855 Firmware-
BinatoneglobalMbp4855-

Related Weaknesses (CWE)

CWE-522CWE-326

References

FAQ

What is CVE-2021-3789?

CVE-2021-3789 is a vulnerability with a CVSS score of 4.2 (MEDIUM). An information disclosure vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow an attacker with physical access to obtain the encryption key used to decrypt fir...

How severe is CVE-2021-3789?

CVE-2021-3789 has been rated MEDIUM with a CVSS base score of 4.2/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-3789?

Check the references section above for vendor advisories and patch information. Affected products include: Binatoneglobal Halo\+ Camera Firmware, Binatoneglobal Halo\+ Camera, Binatoneglobal Comfort 85 Connect Firmware, Binatoneglobal Comfort 85 Connect, Binatoneglobal Mbp3855 Firmware.