CVE-2021-38394
Missing Protection against Hardware Reverse Engineering Using Integrated Circuit Imaging Techniques for Boston Scientific Zoom Latitude
- State
- Published
- Severity
- 6.2 Medium
- Published
- Oct 4, 2021
- Updated
- Sep 16, 2024
- Reserved
- Aug 10, 2021
Description
An attacker with physical access to the device can extract the binary that checks for the hardware key and reverse engineer it, which could be used to create a physical duplicate of a valid hardware key. The hardware key allows access to special settings when inserted.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 6.2 Medium | CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:C/C:L/I:H/A:L | icscert |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
ZOOM LATITUDEBoston Scientific |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.