Cyber Resilience

CVE-2021-3793

Medium

Published: 12 November 2021

Published
12 November 2021
Modified
21 November 2024
KEV Added
—
Patch
—
CVSS Score v3.1 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
EPSS Score 0.0032 55.4th percentile
Risk Priority 13 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2021-3793 is a medium-severity Improper Protection of Alternate Path (CWE-424) vulnerability in Binatoneglobal Focus 68 Firmware. Its CVSS base score is 6.5 (Medium).

Operationally, ranked in the top 44.6% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability details

An improper access control vulnerability was reported in some Motorola-branded Binatone Hubble Cameras which could allow an unauthenticated attacker on the same network as the device to access administrative pages that could result in information disclosure or device firmware update…

more

with verified firmware.

CWE(s)
CWE-424NVD-CWE-Other

Related Threats

No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.

Affected Assets

binatoneglobal
halo\+ camera firmware
≤ 03.50.14
binatoneglobal
comfort 85 connect firmware
≤ 03.40.02
binatoneglobal
mbp3855 firmware
≤ 03.40.00
binatoneglobal
focus 68 firmware
all versions
binatoneglobal
focus 72r firmware
≤ 03.40.00 · ≤ 03.40.00
binatoneglobal
cn28 firmware
all versions
binatoneglobal
cn50 firmware
all versions
binatoneglobal
comfort 40 firmware
all versions
binatoneglobal
comfort 50 connect firmware
all versions
binatoneglobal
mbp4855 firmware
all versions
+11 more product configuration(s) — see NVD for full list

Mitigating Controls

Likely Mitigating Controls AI

Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.

AC-17 Remote Access
addresses: CWE-424

Documenting requirements and authorizing remote access ensures proper protection of alternate paths.

References