CVE-2021-3787
A vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow an...
A vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow an attacker with local access to obtain the MQTT credentials that could result in unauthorized access to backend Hubble services.
Attack profile
How easy it is to exploit
- Attack vector
- Physical
- Complexity
- High
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
A vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow an attacker with local access to obtain the MQTT credentials that could result in unauthorized access to backend Hubble services.
- Record
CVE-2021-3787- CVSS 3.1
- 6.4 Medium
CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-256
- Updated
- 2026-11-02
EUVDEUVD-2021-27049
A vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow an attacker with local access to obtain the MQTT credentials that could result in unauthorized access to backend Hubble services.
- Record
EUVD-2021-27049- CVSS 3.1
- 6.4 Medium
CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-c5w7-c2gm-9hxp
A vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow an...
A vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow an attacker with local access to obtain the MQTT credentials that could result in unauthorized access to backend Hubble services.
- Record
GHSA-c5w7-c2gm-9hxp- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-522
- Updated
- 2026-11-02
NVD
A vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow an attacker with local access to obtain the MQTT credentials that could result in unauthorized access to backend Hubble services.
- Record
CVE-2021-3787- CVSS 3.1
- 6.4 Medium
CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 4.6 Medium
AV:L/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-256
- Updated
- 2026-11-02
Affected products
- motorola binatone hubble cameras
- binatoneglobal cn28 firmware
- binatoneglobal cn40 firmware
- binatoneglobal cn50 firmware
- binatoneglobal cn75 firmware
- binatoneglobal comfort 40 firmware
- binatoneglobal comfort 50 connect firmware
- binatoneglobal comfort 85 connect firmware
- binatoneglobal connect 20 firmware
- binatoneglobal connect view 65 firmware
- binatoneglobal ease44 firmware
- binatoneglobal focus 68 firmware
Show 10 moreShow less
- binatoneglobal focus 72r firmware
- binatoneglobal halo\+ camera firmware
- binatoneglobal lux 64 firmware
- binatoneglobal lux 65 firmware
- binatoneglobal lux 85 connect firmware
- binatoneglobal mbp3667 firmware
- binatoneglobal mbp3855 firmware
- binatoneglobal mbp4855 firmware
- binatoneglobal mbp669 connect firmware
- binatoneglobal mbp6855 firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-3787 is a medium vulnerability (CVSS 6.4) in Motorola Binatone Hubble Cameras, published November 12, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.17%, the 6th percentile. No source names a fixed version.