CVE-2021-38394

MEDIUM

6.2

Description

An attacker with physical access to the device can extract the binary that checks for the hardware key and reverse engineer it, which could be used to create a physical duplicate of a valid hardware key. The hardware key allows access to special settings when inserted.

Details CVE

Score CVSS v3.16.2

SeveriteMEDIUM

Vecteur CVSSCVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:C/C:L/I:H/A:L

Vecteur d'attaquePHYSICAL

ComplexiteHIGH

Privileges requisNONE

Interaction utilisateurREQUIRED

Publie10/4/2021

Derniere modification11/21/2024

Sourcenvd

Observations honeypot0

Produits affectes

bostonscientific:zoom_latitude_pogrammer\/recorder\/monitor_3120bostonscientific:zoom_latitude_pogrammer\/recorder\/monitor_3120_firmware

Faiblesses (CWE)

CWE-1278

References

https://us-cert.cisa.gov/ics/advisories/icsma-21-273-01(ics-cert@hq.dhs.gov)

https://us-cert.cisa.gov/ics/advisories/icsma-21-273-01(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.