Vulnerability · Published Nov 12, 2021 · Assigned by lenovo
CVE-2021-3791
Medium 6.5
In plain English
A medium-severity sensitive data in logs in Binatone Hubble Cameras from Motorola. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 37% of all known vulnerabilities).
Severity (CVSS 3.1)6.5Medium
Exploit odds (30 days)0.4%top 63.4% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
An information disclosure vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow an unauthenticated attacker on the same subnet to download an encrypted log file containing sensitive information such as WiFi SSID and password.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Motorola | Binatone Hubble Cameras | various |
Weakness: CWE-532 · Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
References
- https://binatoneglobal.com/security-advisory/ x_refsource_MISC