CVE-2021-3790

EPSS 0.39%
Veröffentlicht 12.11.2021 22:15:08
Zuletzt bearbeitet 21.11.2024 06:22:26
Erkennungen
Login

A buffer overflow was reported in the local web server of some Motorola-branded Binatone Hubble Cameras that could allow an unauthenticated attacker on the same network to perform a denial-of-service attack against the device.

Betroffene Produkte Warnungen 0 Metriken 4 CWE 2 Referenzen 4

NVD 23 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Binatoneglobal ≫ Halo+ Camera Firmware Version < 03.50.14

Binatoneglobal ≫ Halo+ Camera Version -

Binatoneglobal ≫ Comfort 85 Connect Firmware Version < 03.40.02

Binatoneglobal ≫ Comfort 85 Connect Version -

Binatoneglobal ≫ Mbp3855 Firmware Version < 03.40.00

Binatoneglobal ≫ Mbp3855 Version -

Binatoneglobal ≫ Focus 68 Firmware Version -

Binatoneglobal ≫ Focus 68 Version v100

Binatoneglobal ≫ Focus 68 Firmware Version -

Binatoneglobal ≫ Focus 68 Version v200

Binatoneglobal ≫ Focus 72r Firmware Version < 03.40.00

Binatoneglobal ≫ Focus 72r Version v100

Binatoneglobal ≫ Focus 72r Firmware Version < 03.40.00

Binatoneglobal ≫ Focus 72r Version v200

Binatoneglobal ≫ Cn28 Firmware Version -

Binatoneglobal ≫ Cn28 Version -

Binatoneglobal ≫ Cn50 Firmware Version -

Binatoneglobal ≫ Cn50 Version -

Binatoneglobal ≫ Comfort 40 Firmware Version -

Binatoneglobal ≫ Comfort 40 Version -

Binatoneglobal ≫ Comfort 50 Connect Firmware Version -

Binatoneglobal ≫ Comfort 50 Connect Version -

Binatoneglobal ≫ Mbp4855 Firmware Version -

Binatoneglobal ≫ Mbp4855 Version -

Binatoneglobal ≫ Mbp3667 Firmware Version -

Binatoneglobal ≫ Mbp3667 Version -

Binatoneglobal ≫ Mbp669 Connect Firmware Version -

Binatoneglobal ≫ Mbp669 Connect Version -

Binatoneglobal ≫ Lux 64 Firmware Version -

Binatoneglobal ≫ Lux 64 Version -

Binatoneglobal ≫ Lux 65 Firmware Version -

Binatoneglobal ≫ Lux 65 Version -

Binatoneglobal ≫ Connect View 65 Firmware Version -

Binatoneglobal ≫ Connect View 65 Version -

Binatoneglobal ≫ Lux 85 Connect Firmware Version -

Binatoneglobal ≫ Lux 85 Connect Version -

Binatoneglobal ≫ Ease44 Firmware Version -

Binatoneglobal ≫ Ease44 Version -

Binatoneglobal ≫ Connect 20 Firmware Version -

Binatoneglobal ≫ Connect 20 Version -

Binatoneglobal ≫ Mbp6855 Firmware Version -

Binatoneglobal ≫ Mbp6855 Version -

Binatoneglobal ≫ Cn40 Firmware Version -

Binatoneglobal ≫ Cn40 Version -

Binatoneglobal ≫ Cn75 Firmware Version -

Binatoneglobal ≫ Cn75 Version -

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.39%	0.307

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	6.5	2.8	3.6	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NIST	3.3	6.5	2.9	AV:A/AC:L/Au:N/C:N/I:N/A:P
Lenovo	6.5	2.8	3.6	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

CWE-121 Stack-based Buffer Overflow

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

https://binatoneglobal.com/security-advisory/

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2021-3790

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2021-3790

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2021-3790

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2021-3790