CVE-2021-38394

MEDIUM

6.2

Description

An attacker with physical access to the device can extract the binary that checks for the hardware key and reverse engineer it, which could be used to create a physical duplicate of a valid hardware key. The hardware key allows access to special settings when inserted.

CVE Details

CVSS v3.1 Score6.2

SeverityMEDIUM

CVSS VectorCVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:C/C:L/I:H/A:L

Attack VectorPHYSICAL

ComplexityHIGH

Privileges RequiredNONE

User InteractionREQUIRED

Published10/4/2021

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

bostonscientific:zoom_latitude_pogrammer\/recorder\/monitor_3120bostonscientific:zoom_latitude_pogrammer\/recorder\/monitor_3120_firmware

Weaknesses (CWE)

CWE-1278

References

https://us-cert.cisa.gov/ics/advisories/icsma-21-273-01(ics-cert@hq.dhs.gov)

https://us-cert.cisa.gov/ics/advisories/icsma-21-273-01(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.