CVE-2021-38392

Published: Oct 4, 2021Modified: Jun 17, 2026

7.6

Vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Exploitability: 0.9 / Impact: 6.0

Source: NVD

Description

A skilled attacker with physical access to the affected device can gain access to the hard disk drive of the device to change the telemetry region and could use this setting to interrogate or program an implantable device in any region in the world.

Affected (1)

Products: Bostonscientific: Zoom Latitude Pogrammer/recorder/monitor 3120 Firmware

Bostonscientific

1 product

Zoom Latitude Pogrammer/recorder/monitor 3120 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Bostonscientific Zoom Latitude Pogrammer/recorder/monitor 3120 Firmware	All versions

Running on/with	Platform Versions
Bostonscientific Zoom Latitude Pogrammer/recorder/monitor 3120	All versions

Related CWEs

CWE-284

Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (2)

https://us-cert.cisa.gov/ics/advisories/icsma-21-273-01

Source: ics-cert@hq.dhs.gov

Third Party AdvisoryUS Government Resource

https://us-cert.cisa.gov/ics/advisories/icsma-21-273-01

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

Timeline

No history available yet.