CVE-2021-3791: Binatoneglobal CN28 Firmware

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

An information disclosure vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow an unauthenticated attacker on the same subnet to download an encrypted log file containing sensitive information such as WiFi SSID and password.

Affected products

• Binatoneglobal CN28 Firmware: affected versions not specified
• Binatoneglobal CN40 Firmware: affected versions not specified
• Binatoneglobal CN50 Firmware: affected versions not specified
• Binatoneglobal CN75 Firmware: affected versions not specified
• Binatoneglobal Comfort 40 Firmware: affected versions not specified
• Binatoneglobal Comfort 50 Connect Firmware: affected versions not specified
• Binatoneglobal Comfort 85 Connect Firmware: before 03.40.02 (fixed in 03.40.02)
• Binatoneglobal Connect 20 Firmware: affected versions not specified
• Binatoneglobal Connect View 65 Firmware: affected versions not specified
• Binatoneglobal EASE44 Firmware: affected versions not specified
• Binatoneglobal Focus 68 Firmware: affected versions not specified
• Binatoneglobal Focus 72r Firmware: before 03.40.00 (fixed in 03.40.00)
• Binatoneglobal Halo+ Camera Firmware: before 03.50.14 (fixed in 03.50.14)
• Binatoneglobal Lux 64 Firmware: affected versions not specified
• Binatoneglobal Lux 65 Firmware: affected versions not specified
• Binatoneglobal Lux 85 Connect Firmware: affected versions not specified
• Binatoneglobal MBP3667 Firmware: affected versions not specified
• Binatoneglobal MBP3855 Firmware: before 03.40.00 (fixed in 03.40.00)
• Binatoneglobal MBP4855 Firmware: affected versions not specified
• Binatoneglobal MBP669 Connect Firmware: affected versions not specified
• Binatoneglobal MBP6855 Firmware: affected versions not specified

Published 2021-11-12. Last modified 2026-06-17.