MEDIUM🇵🇱 Wersja polska

CVE-2021-38392

CVSS 6.5v3.1pub. 2021-10-04upd. 2024-11-21

A skilled attacker with physical access to the affected device can gain access to the hard disk drive of the device to change the telemetry region and could use this setting to interrogate or program an implantable device in any region in the world.

CVSS Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L

  • Bostonscientific Zoom Latitude Pogrammer\/recorder\/monitor 3120

    HW
    Bostonscientific
    all versions

  • Bostonscientific Zoom Latitude Pogrammer\/recorder\/monitor 3120 Firmware

    OS
    Bostonscientific
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2021-38394MEDIUM6.2same product

An attacker with physical access to the device can extract the binary that checks for the hardware key and rev...

CVE-2021-38396MEDIUM6.5same product

The programmer installation utility does not perform a cryptographic authenticity or integrity checks of the s...

CVE-2021-38398MEDIUM6.5same product

The affected device uses off-the-shelf software components that contain unpatched vulnerabilities. A malicious...

CVE-2021-38400MEDIUM6.9same product

An attacker with physical access to Boston Scientific Zoom Latitude Model 3120 can remove the hard disk drive ...

CVE-2017-14012MEDIUM4.6same vendor

Boston Scientific ZOOM LATITUDE PRM Model 3120 does not encrypt PHI at rest. CVSS v3 base score: 4.6; CVSS vec...