CVE-2021-3577: An unauthenticated remote code execution vulnerability was reported in some Motorola-branded Binatone Hubble C

Q: How do I fix CVE-2021-3577?

halo\+ camera firmware: upgrade to 03.50.14; comfort 85 connect firmware: upgrade to 03.40.02; mbp3855 firmware: upgrade to 03.40.00. Exact commands for each OS are on this page.

Q: Is CVE-2021-3577 being exploited?

CVE-2021-3577 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

Q: What does CVE-2021-3577 affect?

CVE-2021-3577 affects halo\+ camera firmware, comfort 85 connect firmware, mbp3855 firmware. Severity is high (CVSS 8.8). An unauthenticated remote code execution vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow an attacker on the same network unauthorized access to the device.

Q: How urgent is CVE-2021-3577?

Priority 56/100. High severity; EPSS top 1%: very likely to be exploited

This week

HIGH 8.8UPGRADEUPGRADEUPGRADE

CVE-2021-3577 is a high-severity flaw (CVSS 8.8) affecting halo\+ camera firmware, comfort 85 connect firmware, mbp3855 firmware. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

An unauthenticated remote code execution vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow an attacker on the same network unauthorized access to the device.

Why this priority

High severity
EPSS top 1%: very likely to be exploited

A fixed release or distro patch exists.

Risk facts

CVSS score	8.8 (High)
Attack vector	Adjacent network
Attack complexity	Low
Privileges needed	None
User interaction	None
EPSS exploit chance	60.2% (top 1%)
CISA exploited list	No
Weakness	CWE-78, CWE-863
Published	2021-11-12
Last modified	2026-06-17

Publisher (CNA): Lenovo Group Ltd. · Vendor: binatoneglobal

Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2021-11-12 22:15 UTCPublished CVE record published
2026-06-17 04:05 UTCUpdated Record last modified

binatoneglobal halo\+ camera firmware UPGRADE

Affected: < 03.50.14

Fixed in: 03.50.14

Safe to downgrade to: no unaffected older release

Check your OS release

cat /etc/os-release; uname -r

Debian / Ubuntu

sudo apt update && sudo apt full-upgrade

RHEL / Amazon Linux / Fedora

sudo dnf upgrade --refresh

Windows

Install the latest cumulative update from Windows Update

If no patch exists yet

OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.

binatoneglobal comfort 85 connect firmware UPGRADE

Affected: < 03.40.02

Fixed in: 03.40.02

Safe to downgrade to: no unaffected older release

Check your OS release

cat /etc/os-release; uname -r

Debian / Ubuntu

sudo apt update && sudo apt full-upgrade

RHEL / Amazon Linux / Fedora

sudo dnf upgrade --refresh

Windows

Install the latest cumulative update from Windows Update

If no patch exists yet

OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.

binatoneglobal mbp3855 firmware UPGRADE

Affected: < 03.40.00

Fixed in: 03.40.00

Safe to downgrade to: no unaffected older release

Check your OS release

cat /etc/os-release; uname -r

Debian / Ubuntu

sudo apt update && sudo apt full-upgrade

RHEL / Amazon Linux / Fedora

sudo dnf upgrade --refresh

Windows

Install the latest cumulative update from Windows Update

If no patch exists yet

OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.

binatoneglobal focus 68 firmware MITIGATE

Affected: all versions

Fixed in: no fixed release known

Safe to downgrade to: no unaffected older release

Check your OS release

cat /etc/os-release; uname -r

Debian / Ubuntu

sudo apt update && sudo apt full-upgrade

RHEL / Amazon Linux / Fedora

sudo dnf upgrade --refresh

Windows

Install the latest cumulative update from Windows Update

If no patch exists yet

OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.

binatoneglobal focus 72r firmware UPGRADE

Affected: < 03.40.00

Fixed in: 03.40.00

Safe to downgrade to: no unaffected older release

Check your OS release

cat /etc/os-release; uname -r

Debian / Ubuntu

sudo apt update && sudo apt full-upgrade

RHEL / Amazon Linux / Fedora

sudo dnf upgrade --refresh

Windows

Install the latest cumulative update from Windows Update

If no patch exists yet

OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.

binatoneglobal cn28 firmware MITIGATE

Affected: all versions

Fixed in: no fixed release known

Safe to downgrade to: no unaffected older release

Check your OS release

cat /etc/os-release; uname -r

Debian / Ubuntu

sudo apt update && sudo apt full-upgrade

RHEL / Amazon Linux / Fedora

sudo dnf upgrade --refresh

Windows

Install the latest cumulative update from Windows Update

If no patch exists yet

OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.

Public exploits and detection

Public code exists for this CVE. Treat unpatched systems as at risk, and only run PoCs in a lab.

Nuclei scan template: Motorola Baby Monitors - Remote Command Execution

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2021-3577?

halo\+ camera firmware: upgrade to 03.50.14; comfort 85 connect firmware: upgrade to 03.40.02; mbp3855 firmware: upgrade to 03.40.00. Exact commands for each OS are on this page.

Is CVE-2021-3577 being exploited?

CVE-2021-3577 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2021-3577 affect?

CVE-2021-3577 affects halo\+ camera firmware, comfort 85 connect firmware, mbp3855 firmware. Severity is high (CVSS 8.8). An unauthenticated remote code execution vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow an attacker on the same network unauthorized access to the device.

How urgent is CVE-2021-3577?

Priority 56/100. High severity; EPSS top 1%: very likely to be exploited

Related CVEs

CVE-2021-3793 MEDIUM 6.5 UPGRADE UPGRADE An improper access control vulnerability was reported in some Motorola-branded Binatone Hubble Cameras which c
CVE-2021-3792 MEDIUM 5.3 UPGRADE UPGRADE Some device communications in some Motorola-branded Binatone Hubble Cameras with backend Hubble services are n
CVE-2021-3791 MEDIUM 6.5 UPGRADE UPGRADE An information disclosure vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that cou
CVE-2021-3790 MEDIUM 6.5 UPGRADE UPGRADE A buffer overflow was reported in the local web server of some Motorola-branded Binatone Hubble Cameras that c
CVE-2021-3789 MEDIUM 4.2 UPGRADE UPGRADE An information disclosure vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that cou

References

← Back to latest CVEs