PT-2021-22110 · Boston Scientific · Zoom Latitude+2

Christian Dresen + 3 · Published 2021-10-04 · Updated 2022-09-10 · CVE-2021-38398

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:P/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned.

Description The issue concerns the presence of unpatched vulnerabilities in off-the-shelf software components used by the affected device. A malicious attacker with physical access to the device could exploit these vulnerabilities.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-1329

Related Identifiers

CVE-2021-38398

Affected Products

Zoom Latitude

Zoom Latitude Pogrammer/Recorder/Monitor 3120 Firmware

Zoom Latitude Programming System Model 3120 Firmware

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2021-38398 · Security Note
• https://t.me/cibsecurity/29929 · Telegram Post
• https://us-cert.cisa.gov/ics/advisories/icsma-21-273-01 · Note