Sign-up

ID

VAR-202111-0511


CVE

CVE-2021-3791


TITLE

plural  Motorola-branded Binatone Hubble  Vulnerability related to information leakage from log files in cameras

Trust: 0.8

sources: JVNDB: JVNDB-2021-014943

DESCRIPTION

An information disclosure vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow an unauthenticated attacker on the same subnet to download an encrypted log file containing sensitive information such as WiFi SSID and password. Binatone Motorola-branded Camera is a Motorola brand product camera authorized by Binatone Company

Trust: 2.16

sources: NVD: CVE-2021-3791 // JVNDB: JVNDB-2021-014943 // CNVD: CNVD-2022-77542

IOT TAXONOMY

category:['IoT']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2022-77542

AFFECTED PRODUCTS

vendor:binatoneglobalmodel:cn28scope:eqversion: -

Trust: 1.0

vendor:binatoneglobalmodel:cn75scope:eqversion: -

Trust: 1.0

vendor:binatoneglobalmodel:mbp4855scope:eqversion: -

Trust: 1.0

vendor:binatoneglobalmodel:cn50scope:eqversion: -

Trust: 1.0

vendor:binatoneglobalmodel:mbp3667scope:eqversion: -

Trust: 1.0

vendor:binatoneglobalmodel:connect view 65scope:eqversion: -

Trust: 1.0

vendor:binatoneglobalmodel:focus 72rscope:ltversion:03.40.00

Trust: 1.0

vendor:binatoneglobalmodel:halo\+ camerascope:ltversion:03.50.14

Trust: 1.0

vendor:binatoneglobalmodel:connect 20scope:eqversion: -

Trust: 1.0

vendor:binatoneglobalmodel:lux 64scope:eqversion: -

Trust: 1.0

vendor:binatoneglobalmodel:mbp3855scope:ltversion:03.40.00

Trust: 1.0

vendor:binatoneglobalmodel:lux 65scope:eqversion: -

Trust: 1.0

vendor:binatoneglobalmodel:comfort 85 connectscope:ltversion:03.40.02

Trust: 1.0

vendor:binatoneglobalmodel:cn40scope:eqversion: -

Trust: 1.0

vendor:binatoneglobalmodel:comfort 40scope:eqversion: -

Trust: 1.0

vendor:binatoneglobalmodel:focus 68scope:eqversion: -

Trust: 1.0

vendor:binatoneglobalmodel:comfort 50 connectscope:eqversion: -

Trust: 1.0

vendor:binatoneglobalmodel:ease44scope:eqversion: -

Trust: 1.0

vendor:binatoneglobalmodel:lux 85 connectscope:eqversion: -

Trust: 1.0

vendor:binatoneglobalmodel:mbp669 connectscope:eqversion: -

Trust: 1.0

vendor:binatoneglobalmodel:mbp6855scope:eqversion: -

Trust: 1.0

vendor:binatone globalmodel:comfort 50 connectscope: - version: -

Trust: 0.8

vendor:binatone globalmodel:comfort 40scope: - version: -

Trust: 0.8

vendor:binatone globalmodel:cn28scope: - version: -

Trust: 0.8

vendor:binatone globalmodel:cn50scope: - version: -

Trust: 0.8

vendor:binatone globalmodel:mbp3855scope: - version: -

Trust: 0.8

vendor:binatone globalmodel:halo+ カメラscope: - version: -

Trust: 0.8

vendor:binatone globalmodel:mbp4855scope: - version: -

Trust: 0.8

vendor:binatone globalmodel:focus 72rscope: - version: -

Trust: 0.8

vendor:binatone globalmodel:comfort 85 connectscope: - version: -

Trust: 0.8

vendor:binatone globalmodel:focus 68scope: - version: -

Trust: 0.8

vendor:binatonemodel:motorola-branded camerascope: - version: -

Trust: 0.6

sources: CNVD: CNVD-2022-77542 // JVNDB: JVNDB-2021-014943 // NVD: CVE-2021-3791

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2021-3791
value: MEDIUM

Trust: 1.0

psirt@lenovo.com: CVE-2021-3791
value: MEDIUM

Trust: 1.0

NVD: CVE-2021-3791
value: MEDIUM

Trust: 0.8

CNVD: CNVD-2022-77542
value: LOW

Trust: 0.6

CNNVD: CNNVD-202111-1177
value: MEDIUM

Trust: 0.6

nvd@nist.gov: CVE-2021-3791
severity: LOW
baseScore: 3.3
vectorString: AV:A/AC:L/AU:N/C:P/I:N/A:N
accessVector: ADJACENT_NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 6.5
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

CNVD: CNVD-2022-77542
severity: LOW
baseScore: 3.3
vectorString: AV:A/AC:L/AU:N/C:P/I:N/A:N
accessVector: ADJACENT_NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 6.5
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

nvd@nist.gov: CVE-2021-3791
baseSeverity: MEDIUM
baseScore: 6.5
vectorString: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
attackVector: ADJACENT
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 2.8
impactScore: 3.6
version: 3.1

Trust: 2.0

OTHER: JVNDB-2021-014943
baseSeverity: MEDIUM
baseScore: 6.5
vectorString: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
attackVector: ADJACENT NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

sources: CNVD: CNVD-2022-77542 // JVNDB: JVNDB-2021-014943 // CNNVD: CNNVD-202111-1177 // NVD: CVE-2021-3791 // NVD: CVE-2021-3791

PROBLEMTYPE DATA

problemtype:CWE-532

Trust: 1.0

problemtype:Information leakage from log files (CWE-532) [ others ]

Trust: 0.8

sources: JVNDB: JVNDB-2021-014943 // NVD: CVE-2021-3791

THREAT TYPE

remote or local

Trust: 0.6

sources: CNNVD: CNNVD-202111-1177

TYPE

log information leak

Trust: 0.6

sources: CNNVD: CNNVD-202111-1177

PATCH

title:Binatone Motorola-branded Camera Vulnerabilitiesurl:https://binatoneglobal.com/security-advisory/

Trust: 0.8

title:Patch for Binatone Motorola-branded Camera Information Disclosure Vulnerabilityurl:https://www.cnvd.org.cn/patchInfo/show/360871

Trust: 0.6

title:Binatone Motorola-branded Camera Repair measures for log information disclosure vulnerabilitiesurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=170334

Trust: 0.6

sources: CNVD: CNVD-2022-77542 // JVNDB: JVNDB-2021-014943 // CNNVD: CNNVD-202111-1177

EXTERNAL IDS

db:NVDid:CVE-2021-3791

Trust: 3.8

db:JVNDBid:JVNDB-2021-014943

Trust: 0.8

db:CNVDid:CNVD-2022-77542

Trust: 0.6

db:CNNVDid:CNNVD-202111-1177

Trust: 0.6

sources: CNVD: CNVD-2022-77542 // JVNDB: JVNDB-2021-014943 // CNNVD: CNNVD-202111-1177 // NVD: CVE-2021-3791

REFERENCES

url:https://binatoneglobal.com/security-advisory/

Trust: 2.2

url:https://nvd.nist.gov/vuln/detail/cve-2021-3791

Trust: 1.4

sources: CNVD: CNVD-2022-77542 // JVNDB: JVNDB-2021-014943 // CNNVD: CNNVD-202111-1177 // NVD: CVE-2021-3791

SOURCES

db:CNVDid:CNVD-2022-77542
db:JVNDBid:JVNDB-2021-014943
db:CNNVDid:CNNVD-202111-1177
db:NVDid:CVE-2021-3791

LAST UPDATE DATE

2024-11-23T21:58:39.059000+00:00


SOURCES UPDATE DATE

db:CNVDid:CNVD-2022-77542date:2022-11-16T00:00:00
db:JVNDBid:JVNDB-2021-014943date:2022-11-02T05:32:00
db:CNNVDid:CNNVD-202111-1177date:2022-07-01T00:00:00
db:NVDid:CVE-2021-3791date:2024-11-21T06:22:26.647

SOURCES RELEASE DATE

db:CNVDid:CNVD-2022-77542date:2022-11-16T00:00:00
db:JVNDBid:JVNDB-2021-014943date:2022-11-02T00:00:00
db:CNNVDid:CNNVD-202111-1177date:2021-11-12T00:00:00
db:NVDid:CVE-2021-3791date:2021-11-12T22:15:08.367