CVE-2021-3791

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

An information disclosure vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow an unauthenticated attacker on the same subnet to download an encrypted log file containing sensitive information such as WiFi SSID and password.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-532

Affected software

No affected versions have been published.

Timeline

Published
Nov 12, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-379105.3ASUS routers Wi-Fi protected access protocol (WPA2 and WPA3-SAE) has improper control of Interaction frequency vulnerability, an unauthenticCVE-2021-379118.8The management interface of BenQ smart wireless conference projector does not properly control user's privilege. Attackers can access any syCVE-2021-379129.8The HGiga OAKlouds mobile portal does not filter special characters of the Ethernet number parameter of the network interface card setting pCVE-2021-379139.8The HGiga OAKlouds mobile portal does not filter special characters of the IPv6 Gateway parameter of the network interface card setting pageCVE-2021-379146.5In Argo Workflows through 3.1.3, if EXPRESSION_TEMPLATES is enabled and untrusted users are allowed to specify input parameters when runningCVE-2021-379158.8An issue was discovered on the Grandstream HT801 Analog Telephone Adaptor before 1.0.29.8. From the limited configuration shell, it is possiCVE-2021-379166.1Joplin before 2.0.9 allows XSS via button and form in the note body.CVE-2021-379189.8Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution.CVE-2021-379199.8Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution.CVE-2021-37925.3Some device communications in some Motorola-branded Binatone Hubble Cameras with backend Hubble services are not encrypted which could lead CVE-2021-379209.8Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution.CVE-2021-379219.8Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution.