Vulnerability-Lookup

VAR-202111-0509

Vulnerability from variot - Updated: 2024-11-23 22:33

An improper access control vulnerability was reported in some Motorola-branded Binatone Hubble Cameras which could allow an unauthenticated attacker on the same network as the device to access administrative pages that could result in information disclosure or device firmware update with verified firmware. plural Motorola-branded Binatone Hubble The camera has an unspecified vulnerability.Information may be obtained. Binatone Motorola-branded Camera is a Motorola-branded camera produced by Binatone authorized by Binatone

Show details on source website

JSON

To clipboard

{
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-202111-0509",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "cn28",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "binatoneglobal",
        "version": null
      },
      {
        "model": "cn75",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "binatoneglobal",
        "version": null
      },
      {
        "model": "mbp4855",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "binatoneglobal",
        "version": null
      },
      {
        "model": "cn50",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "binatoneglobal",
        "version": null
      },
      {
        "model": "mbp3667",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "binatoneglobal",
        "version": null
      },
      {
        "model": "connect view 65",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "binatoneglobal",
        "version": null
      },
      {
        "model": "focus 72r",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "binatoneglobal",
        "version": "03.40.00"
      },
      {
        "model": "halo\\+ camera",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "binatoneglobal",
        "version": "03.50.14"
      },
      {
        "model": "connect 20",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "binatoneglobal",
        "version": null
      },
      {
        "model": "lux 64",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "binatoneglobal",
        "version": null
      },
      {
        "model": "mbp3855",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "binatoneglobal",
        "version": "03.40.00"
      },
      {
        "model": "lux 65",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "binatoneglobal",
        "version": null
      },
      {
        "model": "comfort 85 connect",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "binatoneglobal",
        "version": "03.40.02"
      },
      {
        "model": "cn40",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "binatoneglobal",
        "version": null
      },
      {
        "model": "comfort 40",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "binatoneglobal",
        "version": null
      },
      {
        "model": "focus 68",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "binatoneglobal",
        "version": null
      },
      {
        "model": "comfort 50 connect",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "binatoneglobal",
        "version": null
      },
      {
        "model": "ease44",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "binatoneglobal",
        "version": null
      },
      {
        "model": "lux 85 connect",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "binatoneglobal",
        "version": null
      },
      {
        "model": "mbp669 connect",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "binatoneglobal",
        "version": null
      },
      {
        "model": "mbp6855",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "binatoneglobal",
        "version": null
      },
      {
        "model": "comfort 50 connect",
        "scope": null,
        "trust": 0.8,
        "vendor": "binatone global",
        "version": null
      },
      {
        "model": "comfort 40",
        "scope": null,
        "trust": 0.8,
        "vendor": "binatone global",
        "version": null
      },
      {
        "model": "cn28",
        "scope": null,
        "trust": 0.8,
        "vendor": "binatone global",
        "version": null
      },
      {
        "model": "cn50",
        "scope": null,
        "trust": 0.8,
        "vendor": "binatone global",
        "version": null
      },
      {
        "model": "mbp3855",
        "scope": null,
        "trust": 0.8,
        "vendor": "binatone global",
        "version": null
      },
      {
        "model": "halo+ \u30ab\u30e1\u30e9",
        "scope": null,
        "trust": 0.8,
        "vendor": "binatone global",
        "version": null
      },
      {
        "model": "mbp4855",
        "scope": null,
        "trust": 0.8,
        "vendor": "binatone global",
        "version": null
      },
      {
        "model": "focus 72r",
        "scope": null,
        "trust": 0.8,
        "vendor": "binatone global",
        "version": null
      },
      {
        "model": "comfort 85 connect",
        "scope": null,
        "trust": 0.8,
        "vendor": "binatone global",
        "version": null
      },
      {
        "model": "focus 68",
        "scope": null,
        "trust": 0.8,
        "vendor": "binatone global",
        "version": null
      },
      {
        "model": "motorola-branded camera",
        "scope": null,
        "trust": 0.6,
        "vendor": "binatone",
        "version": null
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-77543"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2021-014945"
      },
      {
        "db": "NVD",
        "id": "CVE-2021-3793"
      }
    ]
  },
  "cve": "CVE-2021-3793",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "nvd@nist.gov",
            "availabilityImpact": "NONE",
            "baseScore": 5.0,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 10.0,
            "id": "CVE-2021-3793",
            "impactScore": 2.9,
            "integrityImpact": "NONE",
            "severity": "MEDIUM",
            "trust": 1.8,
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          },
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "CNVD",
            "availabilityImpact": "NONE",
            "baseScore": 5.0,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 10.0,
            "id": "CNVD-2022-77543",
            "impactScore": 2.9,
            "integrityImpact": "NONE",
            "severity": "MEDIUM",
            "trust": 0.6,
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          }
        ],
        "cvssV3": [
          {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "author": "nvd@nist.gov",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "exploitabilityScore": 3.9,
            "id": "CVE-2021-3793",
            "impactScore": 1.4,
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "trust": 1.0,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "author": "psirt@lenovo.com",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "exploitabilityScore": 3.9,
            "id": "CVE-2021-3793",
            "impactScore": 2.5,
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "trust": 1.0,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          {
            "attackComplexity": "Low",
            "attackVector": "Network",
            "author": "NVD",
            "availabilityImpact": "None",
            "baseScore": 5.3,
            "baseSeverity": "Medium",
            "confidentialityImpact": "Low",
            "exploitabilityScore": null,
            "id": "CVE-2021-3793",
            "impactScore": null,
            "integrityImpact": "None",
            "privilegesRequired": "None",
            "scope": "Unchanged",
            "trust": 0.8,
            "userInteraction": "None",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.0"
          }
        ],
        "severity": [
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2021-3793",
            "trust": 1.0,
            "value": "MEDIUM"
          },
          {
            "author": "psirt@lenovo.com",
            "id": "CVE-2021-3793",
            "trust": 1.0,
            "value": "MEDIUM"
          },
          {
            "author": "NVD",
            "id": "CVE-2021-3793",
            "trust": 0.8,
            "value": "Medium"
          },
          {
            "author": "CNVD",
            "id": "CNVD-2022-77543",
            "trust": 0.6,
            "value": "MEDIUM"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-202111-1180",
            "trust": 0.6,
            "value": "MEDIUM"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-77543"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2021-014945"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202111-1180"
      },
      {
        "db": "NVD",
        "id": "CVE-2021-3793"
      },
      {
        "db": "NVD",
        "id": "CVE-2021-3793"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "An improper access control vulnerability was reported in some Motorola-branded Binatone Hubble Cameras which could allow an unauthenticated attacker on the same network as the device to access administrative pages that could result in information disclosure or device firmware update with verified firmware. plural Motorola-branded Binatone Hubble The camera has an unspecified vulnerability.Information may be obtained. Binatone Motorola-branded Camera is a Motorola-branded camera produced by Binatone authorized by Binatone",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2021-3793"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2021-014945"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2022-77543"
      }
    ],
    "trust": 2.16
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2021-3793",
        "trust": 3.8
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2021-014945",
        "trust": 0.8
      },
      {
        "db": "CNVD",
        "id": "CNVD-2022-77543",
        "trust": 0.6
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202111-1180",
        "trust": 0.6
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-77543"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2021-014945"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202111-1180"
      },
      {
        "db": "NVD",
        "id": "CVE-2021-3793"
      }
    ]
  },
  "id": "VAR-202111-0509",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-77543"
      }
    ],
    "trust": 1.6
  },
  "iot_taxonomy": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "category": [
          "IoT"
        ],
        "sub_category": null,
        "trust": 0.6
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-77543"
      }
    ]
  },
  "last_update_date": "2024-11-23T22:33:00.255000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": "Binatone\u00a0Motorola-branded\u00a0Camera\u00a0Vulnerabilities",
        "trust": 0.8,
        "url": "https://binatoneglobal.com/security-advisory/"
      },
      {
        "title": "Patch for Binatone Motorola-branded Camera Access Control Error Vulnerability",
        "trust": 0.6,
        "url": "https://www.cnvd.org.cn/patchInfo/show/360866"
      },
      {
        "title": "Binatone Motorola-branded Camera Security vulnerabilities",
        "trust": 0.6,
        "url": "http://123.124.177.30/web/xxk/bdxqById.tag?id=170337"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-77543"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2021-014945"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202111-1180"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "NVD-CWE-Other",
        "trust": 1.0
      },
      {
        "problemtype": "CWE-424",
        "trust": 1.0
      },
      {
        "problemtype": "others (CWE-Other) [NVD evaluation ]",
        "trust": 0.8
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2021-014945"
      },
      {
        "db": "NVD",
        "id": "CVE-2021-3793"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 2.2,
        "url": "https://binatoneglobal.com/security-advisory/"
      },
      {
        "trust": 1.4,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2021-3793"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-77543"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2021-014945"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202111-1180"
      },
      {
        "db": "NVD",
        "id": "CVE-2021-3793"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-77543"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2021-014945"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202111-1180"
      },
      {
        "db": "NVD",
        "id": "CVE-2021-3793"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2022-11-16T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2022-77543"
      },
      {
        "date": "2022-11-02T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2021-014945"
      },
      {
        "date": "2021-11-12T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-202111-1180"
      },
      {
        "date": "2021-11-12T22:15:08.473000",
        "db": "NVD",
        "id": "CVE-2021-3793"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2022-11-16T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2022-77543"
      },
      {
        "date": "2022-11-02T05:33:00",
        "db": "JVNDB",
        "id": "JVNDB-2021-014945"
      },
      {
        "date": "2022-10-28T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-202111-1180"
      },
      {
        "date": "2024-11-21T06:22:27",
        "db": "NVD",
        "id": "CVE-2021-3793"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "remote",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202111-1180"
      }
    ],
    "trust": 0.6
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "plural \u00a0Motorola-branded\u00a0Binatone\u00a0Hubble\u00a0 Vulnerability in camera",
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2021-014945"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "other",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202111-1180"
      }
    ],
    "trust": 0.6
  }
}

CVE-2021-3793 (GCVE-0-2021-3793)

Vulnerability from cvelistv5 – Published: 2021-11-12 22:05 – Updated: 2024-08-03 17:09

Summary

Severity ?

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

CWE

CWE-424 - Improper Protection of Alternate Path

Assigner

lenovo

References

URL

Tags

https://binatoneglobal.com/security-advisory/

x_refsource_MISC

Impacted products

	Vendor	Product	Version
	Motorola	Binatone Hubble Cameras	Affected: various

Credits

Motorola thanks Lenovo Global Security Lab for reporting these issues.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T17:09:08.614Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://binatoneglobal.com/security-advisory/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Binatone Hubble Cameras",
          "vendor": "Motorola",
          "versions": [
            {
              "status": "affected",
              "version": "various"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Motorola thanks Lenovo Global Security Lab for reporting these issues."
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An improper access control vulnerability was reported in some Motorola-branded Binatone Hubble Cameras which could allow an unauthenticated attacker on the same network as the device to access administrative pages that could result in information disclosure or device firmware update with verified firmware."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-424",
              "description": "CWE-424 Improper Protection of Alternate Path",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-11-12T22:05:52",
        "orgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b",
        "shortName": "lenovo"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://binatoneglobal.com/security-advisory/"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "value": "Update to the camera firmware version (or newer version) indicated in the Product Impact section of the Binatone Security Advisory: https://binatoneglobal.com/security-advisory/."
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@lenovo.com",
          "ID": "CVE-2021-3793",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Binatone Hubble Cameras",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "various"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Motorola"
              }
            ]
          }
        },
        "credit": [
          {
            "lang": "eng",
            "value": "Motorola thanks Lenovo Global Security Lab for reporting these issues."
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An improper access control vulnerability was reported in some Motorola-branded Binatone Hubble Cameras which could allow an unauthenticated attacker on the same network as the device to access administrative pages that could result in information disclosure or device firmware update with verified firmware."
            }
          ]
        },
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-424 Improper Protection of Alternate Path"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://binatoneglobal.com/security-advisory/",
              "refsource": "MISC",
              "url": "https://binatoneglobal.com/security-advisory/"
            }
          ]
        },
        "solution": [
          {
            "lang": "en",
            "value": "Update to the camera firmware version (or newer version) indicated in the Product Impact section of the Binatone Security Advisory: https://binatoneglobal.com/security-advisory/."
          }
        ],
        "source": {
          "discovery": "UNKNOWN"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b",
    "assignerShortName": "lenovo",
    "cveId": "CVE-2021-3793",
    "datePublished": "2021-11-12T22:05:52",
    "dateReserved": "2021-09-09T00:00:00",
    "dateUpdated": "2024-08-03T17:09:08.614Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

VAR-202111-0509

CVE-2021-3793 (GCVE-0-2021-3793)

Tags

Sightings

Nomenclature