CVE-2021-3577
high · 8.8A public exploit / detection template exists
Weaponised detection is publicly available, which meaningfully raises real-world risk regardless of CVSS. nuclei-templates →
An unauthenticated remote code execution vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow an attacker on the same network unauthorized access to the device.
8.8
CVSS
60.2%
EPSS (exploit prob.)
99th
EPSS percentile
2021-11-12
Published
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-78CWE-863
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| binatoneglobal | halo+_camera_firmware | < 03.50.14 |
| binatoneglobal | halo+_camera | all versions |
| binatoneglobal | comfort_85_connect_firmware | < 03.40.02 |
| binatoneglobal | comfort_85_connect | all versions |
| binatoneglobal | mbp3855_firmware | < 03.40.00 |
| binatoneglobal | mbp3855 | all versions |
| binatoneglobal | focus_68_firmware | all versions |
| binatoneglobal | focus_68 | v100 |
| binatoneglobal | focus_68_firmware | all versions |
| binatoneglobal | focus_68 | v200 |
| binatoneglobal | focus_72r_firmware | < 03.40.00 |
| binatoneglobal | focus_72r | v100 |
| binatoneglobal | focus_72r_firmware | < 03.40.00 |
| binatoneglobal | focus_72r | v200 |
| binatoneglobal | cn28_firmware | all versions |
| binatoneglobal | cn28 | all versions |
| binatoneglobal | cn50_firmware | all versions |
| binatoneglobal | cn50 | all versions |
| binatoneglobal | comfort_40_firmware | all versions |
| binatoneglobal | comfort_40 | all versions |
| binatoneglobal | comfort_50_connect_firmware | all versions |
| binatoneglobal | comfort_50_connect | all versions |
| binatoneglobal | mbp4855_firmware | all versions |
| binatoneglobal | mbp4855 | all versions |
| binatoneglobal | mbp3667_firmware | all versions |
| binatoneglobal | mbp3667 | all versions |
| binatoneglobal | mbp669_connect_firmware | all versions |
| binatoneglobal | mbp669_connect | all versions |
| binatoneglobal | lux_64_firmware | all versions |
| binatoneglobal | lux_64 | all versions |
| binatoneglobal | lux_65_firmware | all versions |
| binatoneglobal | lux_65 | all versions |
| binatoneglobal | connect_view_65_firmware | all versions |
| binatoneglobal | connect_view_65 | all versions |
| binatoneglobal | lux_85_connect_firmware | all versions |
| binatoneglobal | lux_85_connect | all versions |
| binatoneglobal | ease44_firmware | all versions |
| binatoneglobal | ease44 | all versions |
| binatoneglobal | connect_20_firmware | all versions |
| binatoneglobal | connect_20 | all versions |
Check a specific version with /api/v1/cve/match.
References
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2021-3577