CVE-2021-38394

Published: Oct 4, 2021Modified: Jun 17, 2026

6.4

Vector

CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.5 / Impact: 5.9

Source: NVD

Description

An attacker with physical access to the device can extract the binary that checks for the hardware key and reverse engineer it, which could be used to create a physical duplicate of a valid hardware key. The hardware key allows access to special settings when inserted.

Affected (1)

Products: Bostonscientific: Zoom Latitude Pogrammer/recorder/monitor 3120 Firmware

Bostonscientific

1 product

Zoom Latitude Pogrammer/recorder/monitor 3120 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Bostonscientific Zoom Latitude Pogrammer/recorder/monitor 3120 Firmware	All versions

Running on/with	Platform Versions
Bostonscientific Zoom Latitude Pogrammer/recorder/monitor 3120	All versions

Related CWEs

Missing Protection Against Hardware Reverse Engineering Using Integrated Circuit (IC) Imaging Techniques

Information stored in hardware may be recovered by an attacker with the capability to capture and analyze images of the integrated circuit using techniques such as scanning electron microscopy.

References (2)

https://us-cert.cisa.gov/ics/advisories/icsma-21-273-01

Source: ics-cert@hq.dhs.gov

Third Party AdvisoryUS Government Resource

https://us-cert.cisa.gov/ics/advisories/icsma-21-273-01

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

Timeline

No history available yet.