CVE-2021-38398

· MEDIUMModified

← All CVEs

CVSS v3.1

6.5

EPSS

0.43%

Published

Oct 4, 2021

Modified

Nov 21, 2024

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The affected device uses off-the-shelf software components that contain unpatched vulnerabilities. A malicious attacker with physical access to the affected device could exploit these vulnerabilities.

CVSS Vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L

Weaknesses (CWE)

CWE-1329

Affected Products (4)

bostonscientific · zoom_latitude_programming_system_model_3120_firmwarevulnerable

bostonscientific · zoom_latitude_programming_system_model_3120

bostonscientific · zoom_latitude_pogrammer\/recorder\/monitor_3120_firmwarevulnerable

bostonscientific · zoom_latitude_pogrammer\/recorder\/monitor_3120

References (2)

https://us-cert.cisa.gov/ics/advisories/icsma-21-273-01

Third Party AdvisoryUS Government Resource

https://us-cert.cisa.gov/ics/advisories/icsma-21-273-01

Third Party AdvisoryUS Government Resource

KEV Catalog EPSS Scores Vendors All CVEs