CVE-2021-38394

MEDIUM

6.2

Beschreibung

An attacker with physical access to the device can extract the binary that checks for the hardware key and reverse engineer it, which could be used to create a physical duplicate of a valid hardware key. The hardware key allows access to special settings when inserted.

CVE Details

CVSS v3.1 Bewertung6.2

SchweregradMEDIUM

CVSS VektorCVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:C/C:L/I:H/A:L

AngriffsvektorPHYSICAL

KomplexitatHIGH

Erforderliche PrivilegienNONE

BenutzerinteraktionREQUIRED

Veroffentlicht10/4/2021

Zuletzt geandert11/21/2024

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

bostonscientific:zoom_latitude_pogrammer\/recorder\/monitor_3120bostonscientific:zoom_latitude_pogrammer\/recorder\/monitor_3120_firmware

Schwachen (CWE)

CWE-1278

Referenzen

https://us-cert.cisa.gov/ics/advisories/icsma-21-273-01(ics-cert@hq.dhs.gov)

https://us-cert.cisa.gov/ics/advisories/icsma-21-273-01(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.