Information Disclosure Vulnerability in Motorola Binatone Hubble Cameras
CVE-2021-3791

6.5MEDIUM

Key Information:

Vendor
Motorola
Vendor
CVE Published:
12 November 2021

Summary

An information disclosure vulnerability exists in Motorola Binatone Hubble Cameras, potentially enabling an unauthenticated attacker on the same network to access an encrypted log file containing sensitive details such as WiFi SSID and password. This flaw raises significant concerns for user privacy and security, highlighting the importance of securing IoT devices against unauthorized access.

Affected Version(s)

Binatone Hubble Cameras various

References

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Motorola thanks Lennert Wouters and GĂĽnes Acar, imec-COSIC, KU Leuven, Belgium for reporting this issue.
.