Vulnerability · Published Oct 4, 2021 · Assigned by icscert
CVE-2021-38396Missing Support Integrity Check for Boston Scientific Zoom Latitude
Medium 6.5
In plain English
A medium-severity security flaw in ZOOM LATITUDE from Boston Scientific. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 7% of all known vulnerabilities).
Severity (CVSS 3.1)6.5Medium
Exploit odds (30 days)0.2%top 93.2% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
The programmer installation utility does not perform a cryptographic authenticity or integrity checks of the software on the flash drive. An attacker could leverage this weakness to install unauthorized software using a specially crafted USB.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Boston Scientific | ZOOM LATITUDE | Model 3120 |
Weakness: CWE-353 · Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L
References
- https://us-cert.cisa.gov/ics/advisories/icsma-21-273-01 x_refsource_MISC