PT-2021-22112 · Boston Scientific · Boston Scientific Zoom Latitude Model 3120

Christian Dresen + 3 · Published 2021-10-04 · Updated 2021-10-13 · CVE-2021-38400

Positive Technologies (AI Summary)

CVSS v3.1

6.9

Medium

Base vector

AV:P/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:L

Name of the Vulnerable Software and Affected Versions Boston Scientific Zoom Latitude Model 3120

Description An attacker with physical access to the device can remove the hard disk drive or create a specially crafted USB to extract the password hash for brute force reverse engineering of the system password.

Recommendations For Boston Scientific Zoom Latitude Model 3120, consider restricting physical access to the device to minimize the risk of exploitation. As a temporary workaround, limit the use of removable storage devices and ensure that all USB ports are securely managed to prevent the creation of specially crafted USB devices. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-916

Related Identifiers

CVE-2021-38400

Affected Products

Boston Scientific Zoom Latitude Model 3120

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2021-38400 · Security Note
• https://us-cert.cisa.gov/ics/advisories/icsma-21-273-01 · Note
• https://t.me/cibsecurity/29918 · Telegram Post