PT-2021-22108 · Boston Scientific · Zoom Latitude+1

Christian Dresen + 3 · Published 2021-10-04 · Updated 2021-10-13 · CVE-2021-38394

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions.

Description An attacker with physical access to the device can extract the binary that checks for the hardware key and reverse engineer it. This could be used to create a physical duplicate of a valid hardware key, which allows access to special settings when inserted.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-1278

Related Identifiers

CVE-2021-38394

Affected Products

Zoom Latitude

Zoom Latitude Pogrammer/Recorder/Monitor 3120 Firmware

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2021-38394 · Security Note
• https://us-cert.cisa.gov/ics/advisories/icsma-21-273-01 · Note
• https://t.me/cibsecurity/29927 · Telegram Post