CVE-2021-38394

6.4 mediumEPSS 0.2%

Medium (6.4) in bostonscientific zoom latitude pogrammer\/recorder\/monitor 3120 firmware. EPSS 0.2% chance of exploitation in the next 30 days.

An attacker with physical access to the device can extract the binary that checks for the hardware key and reverse engineer it, which could be used to create a physical duplicate of a valid hardware key. The hardware key allows access to special settings when inserted.

Severity

CVSS 3.1

6.4 medium

CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 14% of CVEs (scores of 2026-11-01)
CWE: CWE-1278
Published: 2021-10-04
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

bostonscientific:zoom_latitude_pogrammer\/recorder\/monitor_3120_firmware

References

https://us-cert.cisa.gov/ics/advisories/icsma-21-273-01
https://us-cert.cisa.gov/ics/advisories/icsma-21-273-01

Check your stack JSON